Static task
static1
General
-
Target
MDE_File_Sample_33e9b201a2d784b7a0914f97862be1ecea61ae61.zip
-
Size
17KB
-
MD5
9afd894a0fe71c0cbc78f5e579389306
-
SHA1
a9f8f70ed05ce258b01671aa969fb7e66497f38d
-
SHA256
06d351db311cbc472437af5875f497f67920ac1d158920c89ef9c445645fbb05
-
SHA512
a660c169327907c6b9fb3aeef778590b2e727fce0a528454c3620930f6819609d158dc4c6f7412e3d129bb53315085c3e9940ab2c3cf245594129d58182e1bc5
-
SSDEEP
384:4lQOR5DZ6dDS4k86EqQmYV5tR1tfqHHTRHCeoQFrjmy7+3Ff/VtB/:4uOnZGDS4f3P14HNielrKyS3x9L/
Malware Config
Signatures
Files
-
MDE_File_Sample_33e9b201a2d784b7a0914f97862be1ecea61ae61.zip.zip
Password: infected
-
GDIDEMO.EXE.exe windows x86
Password: infected
680f23eaffa56f4a2e2c24577e6f931c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
SetWindowExtEx
RealizePalette
Pie
GetWorldTransform
SetWorldTransform
ModifyWorldTransform
CreatePen
BitBlt
Polyline
GetStockObject
Rectangle
Ellipse
RoundRect
Chord
DeleteObject
SelectObject
CreatePalette
GetDeviceCaps
SelectPalette
SetViewportExtEx
SetViewportOrgEx
SetMapMode
CreateEllipticRgn
CreateRectRgn
CombineRgn
CreateSolidBrush
FillRgn
kernel32
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
WriteFile
VirtualAlloc
GetStringTypeW
GetStdHandle
GetFileType
VirtualFree
UnhandledExceptionFilter
RtlUnwind
GetModuleFileNameA
GetCommandLineA
GetEnvironmentStrings
ExitProcess
GetStartupInfoA
GetModuleHandleA
GetVersion
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LocalAlloc
LocalLock
LocalUnlock
LocalFree
user32
SetFocus
GetDC
GetClientRect
TranslateMessage
EndDialog
DialogBoxParamA
KillTimer
BeginPaint
EndPaint
SetTimer
GetDlgItem
InvalidateRect
SetRect
wsprintfA
GetMessageA
DefMDIChildProcA
DispatchMessageA
ReleaseDC
PostMessageA
UpdateWindow
ShowWindow
ModifyMenuA
DefFrameProcA
DrawMenuBar
CreateWindowExA
GetSubMenu
RegisterClassA
LoadCursorA
LoadIconA
SetWindowLongA
UnregisterClassA
PostQuitMessage
GetClassLongA
GetMenu
FillRect
SendMessageA
GetWindowLongA
MessageBoxA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE