Static task
static1
General
-
Target
dd6bd89becfe1b396e0e535482c9c0ed777ec0f6ef1dd417377e39eb7e33264d
-
Size
223KB
-
MD5
ce79df6cf31e074162eed2c856db279b
-
SHA1
e3b0f86b587b31ee5403fc5a0260fda2e9f0748d
-
SHA256
dd6bd89becfe1b396e0e535482c9c0ed777ec0f6ef1dd417377e39eb7e33264d
-
SHA512
f1896f55a9f4bc5f044a601f895810bef78c12a63512b059f6924ada8ee4d78fef0ed8cb67ad470860aac0afce2606d3ab258ccccd432ca1743d08935cd78108
-
SSDEEP
3072:0Nsfh5Njxgpj/D9v9XKSkwg7qQ9Lidgw+CgKXiNyw1sMHfYhsP6FC9DBTX3gS49L:bpdgpLJg7qj7+DKXiNkMAhVCFF3w9L
Malware Config
Signatures
Files
-
dd6bd89becfe1b396e0e535482c9c0ed777ec0f6ef1dd417377e39eb7e33264d.exe windows x86
e1e75077f8ab00555f309c32f1264f8f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
CLRCreateInstance
shlwapi
wnsprintfW
kernel32
GetModuleHandleExW
CloseHandle
CreateFileW
VirtualProtect
ExpandEnvironmentStringsW
GetModuleFileNameW
GetFileAttributesW
LoadLibraryA
GetProcAddress
GetModuleHandleW
SetFilePointerEx
GetConsoleMode
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LocalFree
GetLastError
RaiseException
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
ExitProcess
GetConsoleOutputCP
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
WriteConsoleW
shell32
ShellExecuteW
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ