Static task
static1
General
-
Target
FileSystemOperations.cleo
-
Size
63KB
-
MD5
ec7fc1b2d143ce3de49ee800aeb9d2d5
-
SHA1
3f034cc745abd3e19c176df02150b346ece44d17
-
SHA256
29a802d73aba522f63c036d13d5c872edb6c445a1b6d6e7fa957b37ce8f5edbc
-
SHA512
c972b85a336cd4bbd609fd9bb8c9acea7a4b0a6b4a291d44b047fd19124535915289daa0cfbcd240cd20ce34855bf718c84842b43451ead334932fd41a65aa22
-
SSDEEP
768:HB9foSVzOLFqVZnuPM6S/ijHavvgZRbWEvZFLcFWGNKbq62HsWjcdOv1RriHi5:H0gTd6havcWebLcF24sWjcdRHo
Malware Config
Signatures
Files
-
FileSystemOperations.cleo.dll windows x86
ef19857a6f175cb058bb17f9c52adca3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cleo.asi
ord8
ord3
ord12
ord6
ord5
kernel32
GetFileAttributesA
CreateDirectoryA
FindFirstFileA
RemoveDirectoryA
CopyFileA
SetFileAttributesA
FindClose
MoveFileA
FindNextFileA
DeleteFileA
CreateFileW
FlushFileBuffers
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
Sleep
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
HeapAlloc
HeapReAlloc
SetStdHandle
WriteConsoleW
GetStringTypeW
OutputDebugStringW
LoadLibraryW
HeapSize
LCMapStringW
CloseHandle
user32
MessageBoxA
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ