Static task
static1
General
-
Target
f2734af2f5563cc3acdfd2a3cd11f3d468f4190454f664c63c92de707905a3e1
-
Size
359KB
-
MD5
e556d8034271ba94ff3a6364cc4a5e4d
-
SHA1
dd4baf82332d710b0e7bc5d8ac358517101b053c
-
SHA256
f2734af2f5563cc3acdfd2a3cd11f3d468f4190454f664c63c92de707905a3e1
-
SHA512
fa108cf1fc6ef2c3e74106ac8226875fcb83c38149d38213e4aaa8089861438e9b023cbcc23a44f1daad7c562f8e0e6a2afbdcebeeee0027670614addd9ad4a8
-
SSDEEP
6144:77BfLCzTwFkk2LLIdMNXeMeL01tHy8o12ohGnNQ1A4+:77BfLCzTU32fIs3tE12oc5
Malware Config
Signatures
Files
-
f2734af2f5563cc3acdfd2a3cd11f3d468f4190454f664c63c92de707905a3e1.exe windows x64
4cc971a5cfeb980dc28a1adafadaba08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CreateDirectoryW
ReadFile
FindFirstFileW
FindNextFileW
lstrlenW
WriteFile
ExpandEnvironmentStringsW
GetModuleFileNameW
GetEnvironmentVariableW
GetTempPathW
lstrlenA
FindClose
CreateFileW
GetFileAttributesW
MultiByteToWideChar
Sleep
LoadLibraryA
DeleteFileW
CloseHandle
GetProcAddress
GetFileSize
ExitProcess
CreateProcessW
CopyFileW
WideCharToMultiByte
lstrcpyW
lstrcmpW
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetTimeZoneInformation
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetFileType
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
GetModuleHandleExW
GetStdHandle
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
user32
wsprintfW
shell32
ShellExecuteW
wininet
InternetCloseHandle
InternetReadFile
InternetCrackUrlW
InternetSetOptionW
InternetQueryDataAvailable
InternetQueryOptionW
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetOpenW
urlmon
ObtainUserAgentString
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
shlwapi
StrCmpNA
wnsprintfA
wnsprintfW
StrNCatW
StrCmpNIW
PathCombineW
Sections
.text Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ