Static task
static1
General
-
Target
sai2.exe
-
Size
5.0MB
-
MD5
14d81b0a2d01e8673dd4025fb87f5d2a
-
SHA1
3baf27de53dac3dd14825fe15767ec241beb430b
-
SHA256
fef8848488b8a35b71919b865780e35aa6a3834f174f9e36f788ad8e51598487
-
SHA512
1e9966216612592f77af4359e632aa4565e4a259ca4316007bd7dafe5d6eafbf91d3753b2e5fed1eab26c145d55ad64a8c1896aa0156292f70db137cd0a509c4
-
SSDEEP
49152:YyAnaNojdMnapvoa1JJ5Npu88s/wQAYToF6NUGTbSw:eua5RSw
Malware Config
Signatures
Files
-
sai2.exe.exe windows x64
daaef9f6b0c572ddfb83c945880aa4f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FindNextFileW
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetEnvironmentVariableW
SetEvent
ResetEvent
WaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
WaitForMultipleObjects
CreateEventW
CreateSemaphoreW
GlobalUnlock
GlobalLock
SwitchToThread
ReleaseSemaphore
CompareStringW
CompareFileTime
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
SystemTimeToFileTime
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
SetStdHandle
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetConsoleCP
LoadLibraryA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlPcToFileHeader
GetFileType
SetHandleCount
GetFileSizeEx
FindClose
GetStdHandle
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapCreate
HeapSetInformation
FlsAlloc
SetLastError
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
GetConsoleMode
HeapAlloc
VirtualProtect
HeapFree
RtlUnwindEx
ReadFile
SetFilePointerEx
FindFirstFileW
RemoveDirectoryW
CreateDirectoryW
MoveFileW
DeleteFileW
GetFileAttributesW
GetModuleFileNameA
SetEndOfFile
DebugBreak
VirtualFree
VirtualAlloc
GetSystemInfo
GetCPInfo
GetVersionExW
GetCurrentProcess
GlobalAlloc
GlobalFree
GlobalMemoryStatusEx
DeviceIoControl
GetModuleHandleW
LocalAlloc
RtlCaptureContext
GetCurrentThreadId
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
RaiseException
LoadLibraryW
FormatMessageW
FlushFileBuffers
GetFileSize
lstrlenA
CreateFileW
SetFilePointer
WriteFile
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcAddress
FreeLibrary
VirtualQuery
RtlLookupFunctionEntry
RtlVirtualUnwind
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetCommandLineW
GetModuleFileNameW
GetPrivateProfileStringW
LocalFree
GetTickCount
Sleep
CreateMutexW
GetLastError
CloseHandle
GetCurrentThread
SetThreadPriority
CreateFileA
GetDiskFreeSpaceExW
user32
LoadIconW
GetClassLongPtrW
SetWindowPlacement
SetCapture
EnumThreadWindows
EnumChildWindows
DrawIconEx
WaitMessage
SetActiveWindow
MonitorFromWindow
GetCapture
ChildWindowFromPointEx
WindowFromPoint
GetCursorPos
ScreenToClient
GetParent
GetWindowThreadProcessId
SetWindowPos
SetWindowLongW
GetWindowLongW
SetWindowTextW
GetWindowTextW
GetAncestor
GetFocus
IsChild
GetNextDlgTabItem
SetFocus
ScrollWindowEx
mouse_event
SetParent
GetDlgItem
SetCaretPos
EmptyClipboard
GetClipboardData
IsClipboardFormatAvailable
ShowCaret
CreateCaret
DestroyCaret
HideCaret
GetMessagePos
MsgWaitForMultipleObjects
SetTimer
PostQuitMessage
DestroyWindow
GetMenuInfo
SetForegroundWindow
ReplyMessage
ShowWindow
IsIconic
SetClipboardData
CloseClipboard
OpenClipboard
DispatchMessageW
TranslateMessage
PeekMessageW
SendMessageW
EndPaint
GetAsyncKeyState
AppendMenuW
RegisterClipboardFormatW
IsWindowVisible
GetWindowPlacement
MonitorFromRect
GetMonitorInfoW
SetCursor
SetWindowRgn
ClientToScreen
CheckMenuItem
EnableMenuItem
GetMenuItemCount
GetMenuItemInfoW
GetWindow
GetTopWindow
DestroyIcon
IsZoomed
GetKeyState
SetScrollPos
SetScrollRange
SetScrollInfo
GetScrollPos
CreateMenu
DestroyMenu
InsertMenuItemW
SetMenuInfo
CreatePopupMenu
SetPropW
GetPropW
GetWindowDC
GetClientRect
FrameRect
SetLayeredWindowAttributes
KillTimer
MapWindowPoints
RedrawWindow
GetSysColor
LoadCursorW
RegisterClassExW
EnableWindow
UpdateWindow
GetMessageW
GetWindowLongPtrW
FillRect
GetDC
DrawTextW
ReleaseDC
GetSystemMetrics
CreateWindowExW
MessageBeep
AdjustWindowRectEx
GetWindowRect
SystemParametersInfoW
MoveWindow
GetSystemMenu
DeleteMenu
SetWindowLongPtrW
DefWindowProcW
PostMessageW
MessageBoxW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
BeginPaint
ReleaseCapture
gdi32
CreateCompatibleBitmap
GetCurrentObject
CreateCompatibleDC
CreateRectRgn
CreateRectRgnIndirect
ExtCreateRegion
CombineRgn
GetRegionData
GetTextMetricsW
CreateFontIndirectW
CreateDIBSection
GetGlyphOutlineW
ExtSelectClipRgn
OffsetClipRgn
SelectClipRgn
GetTextExtentPoint32W
GetTextExtentExPointW
ExtTextOutW
RectVisible
CreateDIBitmap
EnumFontFamiliesExW
SetDIBitsToDevice
CreateSolidBrush
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps
SetTextColor
SetBkMode
SetBkColor
GetCharacterPlacementW
GetStockObject
SelectObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
EqualSid
RegOpenKeyExW
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
RegQueryValueExW
RegCloseKey
shell32
SHGetSpecialFolderPathW
DragQueryFileW
DragFinish
SHGetSettings
SHFileOperationW
SHGetFileInfoW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetDataFromIDListW
ord21
CommandLineToArgvW
DragAcceptFiles
ole32
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleDuplicateData
ReleaseStgMedium
StringFromIID
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
OleInitialize
OleUninitialize
oleaut32
SysFreeString
SysAllocString
imm32
ImmAssociateContext
ImmReleaseContext
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmGetContext
ImmAssociateContextEx
ImmSetCompositionFontW
comctl32
ImageList_GetIcon
ImageList_GetIconSize
shlwapi
PathIsRelativeW
StrRetToBufW
PathCanonicalizeW
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 399KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.shared Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.srclibs Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.appskin Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ