Static task
static1
General
-
Target
5b96c5e553067a8b259fb15155c79f7c632f19bb6800712f0a0ee1b328ef8d11
-
Size
359KB
-
MD5
aa5aba029a334162a8f6f835b10047aa
-
SHA1
79ec95bf557958302d5afd784f6b21690ad3b950
-
SHA256
5b96c5e553067a8b259fb15155c79f7c632f19bb6800712f0a0ee1b328ef8d11
-
SHA512
f67aaf8817e49713aa3716a8a38e7f4db8c97c94a3af98e4ac937e69ec7ccf185e3821344f2198e3cd9d5dd496fb302f8274d9ee4cd4cb66d3ae4b85d6fb7fe3
-
SSDEEP
6144:PFYljEYN80tuEJTB82XqyLFLnIGfprVvohGnoudr:PFYljEYNvu4TF1IGVvo+
Malware Config
Signatures
Files
-
5b96c5e553067a8b259fb15155c79f7c632f19bb6800712f0a0ee1b328ef8d11.exe windows x64
4cc971a5cfeb980dc28a1adafadaba08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CreateDirectoryW
ReadFile
FindFirstFileW
FindNextFileW
lstrlenW
WriteFile
ExpandEnvironmentStringsW
GetModuleFileNameW
GetEnvironmentVariableW
GetTempPathW
lstrlenA
FindClose
CreateFileW
GetFileAttributesW
MultiByteToWideChar
Sleep
LoadLibraryA
DeleteFileW
CloseHandle
GetProcAddress
GetFileSize
ExitProcess
CreateProcessW
CopyFileW
WideCharToMultiByte
lstrcpyW
lstrcmpW
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetTimeZoneInformation
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetFileType
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
GetModuleHandleExW
GetStdHandle
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
user32
wsprintfW
shell32
ShellExecuteW
wininet
InternetCloseHandle
InternetReadFile
InternetCrackUrlW
InternetSetOptionW
InternetQueryDataAvailable
InternetQueryOptionW
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetOpenW
urlmon
ObtainUserAgentString
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
shlwapi
StrCmpNA
wnsprintfA
wnsprintfW
StrNCatW
StrCmpNIW
PathCombineW
Sections
.text Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ