Static task
static1
General
-
Target
maxcso.exe
-
Size
482KB
-
MD5
d24009646f64d06aebba7604083e20b1
-
SHA1
aa4c8e1b0257bf6dd05dacecc2019e3a2b051865
-
SHA256
60bbf2f64903018f511a40123adecb22776cd2320cd127e803eaeba88c815f61
-
SHA512
39d5a0e3422e2db652095b88d7b2fbcf50f1904c92658da13da0bc44f2abe6110672b21a1e08a326cfefe0d8b8b6cca993cdab59316edce22e54d110f5a8f383
-
SSDEEP
6144:ZTDmxZ3epKfUd/zOvfSuNvj02y2iYKuY3f6nukXd1wF7uTBq9sAWoeh:4j38Ki/6vfJkxYKh6nZX4F7uTs9sP
Malware Config
Signatures
Files
-
maxcso.exe.exe windows x64
317216be8947dcf6e3124998035f3d2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualFree
VirtualAlloc
FindClose
FindNextFileW
FindFirstFileW
WideCharToMultiByte
HeapSize
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapReAlloc
SetEnvironmentVariableA
GetStringTypeW
MultiByteToWideChar
GetCommandLineW
EnterCriticalSection
GetCurrentProcess
SetEnvironmentVariableW
LeaveCriticalSection
InitializeCriticalSection
GetLastError
QueryPerformanceFrequency
CloseHandle
GetSystemInfo
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
RegisterWaitForSingleObject
UnregisterWait
SetConsoleMode
GetConsoleCursorInfo
CreateFileW
DuplicateHandle
PostQueuedCompletionStatus
QueueUserWorkItem
GetConsoleMode
SetConsoleCursorInfo
FillConsoleOutputCharacterW
ReadConsoleInputW
CreateFileA
ReadConsoleW
WriteConsoleInputW
FillConsoleOutputAttribute
WriteConsoleW
GetNumberOfConsoleInputEvents
SetConsoleCursorPosition
GetFileType
SetErrorMode
GetQueuedCompletionStatus
GetQueuedCompletionStatusEx
CreateIoCompletionPort
SetHandleInformation
CancelIo
CreateEventA
LocalFree
FormatMessageA
DebugBreak
GetModuleHandleA
LoadLibraryA
GetProcAddress
SleepConditionVariableCS
TlsSetValue
ReleaseSemaphore
WakeConditionVariable
InitializeConditionVariable
WaitForSingleObject
ResumeThread
SetEvent
TlsAlloc
GetNativeSystemInfo
DeleteCriticalSection
TlsGetValue
TlsFree
CreateSemaphoreA
SetConsoleCtrlHandler
Sleep
GetLongPathNameW
GetFileAttributesW
ReadDirectoryChangesW
ReadFile
SetNamedPipeHandleState
SetLastError
WriteFile
CreateNamedPipeW
PeekNamedPipe
CancelSynchronousIo
GetNamedPipeHandleStateA
GetCurrentThread
CancelIoEx
SwitchToThread
ConnectNamedPipe
FlushFileBuffers
TerminateProcess
UnregisterWaitEx
LCMapStringW
GetExitCodeProcess
CreateDirectoryW
DeviceIoControl
RemoveDirectoryW
GetFinalPathNameByHandleW
SetFileTime
ReOpenFile
CreateHardLinkW
GetFileInformationByHandle
SetFilePointerEx
MoveFileExW
CopyFileW
CreateSymbolicLinkW
GetStartupInfoW
GetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetModuleHandleW
GetCurrentThreadId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
FreeLibrary
LoadLibraryExW
SetStdHandle
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetConsoleCP
GetFileAttributesExW
SetFileAttributesW
ExitProcess
GetModuleFileNameA
GetCommandLineA
GetACP
HeapAlloc
HeapFree
CompareStringW
shell32
CommandLineToArgvW
ws2_32
shutdown
WSASend
WSASetLastError
WSAIoctl
socket
WSARecv
WSARecvFrom
closesocket
getsockopt
setsockopt
WSAGetLastError
htons
select
WSASocketW
WSAStartup
user32
GetSystemMetrics
GetMessageA
MapVirtualKeyW
DispatchMessageA
TranslateMessage
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
Sections
.text Size: 351KB - Virtual size: 351KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ