Static task
static1
General
-
Target
mofcomp.exe
-
Size
26KB
-
MD5
91fcbb7a7fc4dc1ee2ce72730071904e
-
SHA1
a5d380c5a50c5c52902d3389293a519e592b1e17
-
SHA256
130dc78122599e4593a464be53bd2a9f6a6f2cc3d7d92a43b94cfded69184381
-
SHA512
b87d74a52a718bfa92ee7b64ff3d643fc26a46297efe799754cdd8fdd5303b92ced37237e64f64d129ac21b3af78deb85f5b386e8c964e7c0aee043b18ce443b
-
SSDEEP
384:flL8GsKmxK6P8CMfpyZ4/5y9/QBh8pbBuyb/YE9pukKy2dd1oahD/VWWmoWPk:dPlUYjvEV7BuFdd1oah/VOy
Malware Config
Signatures
Files
-
mofcomp.exe.exe windows x86
acd3e0f2d0b3d1e0ef9e8b2ab96c581c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_except_handler4_common
_controlfp
?terminate@@YAXXZ
??0exception@@QAE@ABQBDH@Z
_onexit
__dllonexit
_unlock
_lock
_initterm
__setusermatherr
__p__fmode
setlocale
_cexit
_exit
exit
__set_app_type
??0exception@@QAE@ABQBD@Z
__wgetmainargs
_amsg_exit
??1type_info@@UAE@XZ
__p__commode
_XcptFilter
memmove
memcpy
_purecall
_callnewh
_CxxThrowException
malloc
??_V@YAXPAX@Z
_vsnwprintf
__CxxFrameHandler3
??3@YAXPAX@Z
_wtol
_wtoi
towupper
?what@exception@@UBEPBDXZ
memset
api-ms-win-core-localization-l1-2-0
LCMapStringW
SetThreadPreferredUILanguages
api-ms-win-eventing-classicprovider-l1-1-0
TraceMessage
GetTraceLoggerHandle
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
UnregisterTraceGuids
api-ms-win-core-heap-l1-1-0
HeapSetInformation
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleW
LoadLibraryExW
FreeLibrary
GetProcAddress
FindResourceExW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
LoadStringW
api-ms-win-core-processenvironment-l1-1-0
GetStdHandle
ExpandEnvironmentStringsW
api-ms-win-core-file-l1-1-0
WriteFile
GetFileAttributesW
api-ms-win-core-com-l1-1-0
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoUninitialize
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
GetSystemDirectoryW
GetSystemTimeAsFileTime
api-ms-win-core-console-l1-1-0
GetConsoleOutputCP
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
api-ms-win-core-version-l1-1-0
VerQueryValueW
GetFileVersionInfoSizeExW
GetFileVersionInfoExW
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
wbemcomn
?Write@CMemoryLog@@QAEXJ@Z
GetMemLogObject
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ