Static task
static1
General
-
Target
MDFILE01_help.7z
-
Size
59KB
-
MD5
e923c11d0082b3fd504b7f2928fa8dc9
-
SHA1
e36cf45f396a85a9dfe7018a715932fbfeb6bf1e
-
SHA256
e0c0d53bf60ec80559da66b4e7471377e66712ef6ebee6aba5208393e0f446f8
-
SHA512
c1c10eb49b66196b45457cb12de967a6572bfdbc40181bee762241310896dd022b2be85dfd6504ed58d0ca51d9ff1f0aba769bf627b8b56397d007ece21c5ff2
-
SSDEEP
1536:R/lWaZT8QJkX08rf00mH3IeSb8jcsA3yQdDd5:R/lCPXXrfqdSb8jcrlf
Malware Config
Signatures
Files
-
MDFILE01_help.7z.7z
Password: Malware123!!
-
help.exe.exe windows x64
Password: Malware123!!
ade923afe522cb5e2504d3c337a43ab8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CopyFileW
CreateFileW
CreateIoCompletionPort
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileW
FindFirstVolumeW
FindNextFileW
FindNextVolumeW
FindVolumeClose
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetEnvironmentVariableW
GetFileSizeEx
GetLastError
GetLogicalDrives
GetModuleFileNameW
GetProcessHeap
GetQueuedCompletionStatus
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVolumePathNamesForVolumeNameW
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LocalAlloc
LocalFree
MoveFileExW
MoveFileW
MulDiv
PostQueuedCompletionStatus
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetPriorityClass
SetThreadPriority
SetUnhandledExceptionFilter
SetVolumeMountPointW
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WriteFile
lstrcatW
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
msvcrt
__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_exit
_fmode
_initterm
_onexit
_snwprintf
abort
bsearch
calloc
exit
fprintf
free
fwprintf
fwrite
malloc
mbstowcs
memcpy
memmove
memset
printf
puts
qsort
raise
realloc
signal
sprintf
strcpy
strlen
strncmp
vfprintf
wcscpy
shell32
CommandLineToArgvW
SHChangeNotify
ShellExecuteExW
user32
DrawTextW
GetDC
GetSystemMetrics
MessageBoxW
ReleaseDC
SystemParametersInfoW
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegCreateKeyExW
RegSetKeyValueW
SystemFunction036
gdi32
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
SelectObject
SetBkColor
SetBkMode
SetTextColor
ole32
CoCreateInstance
CoInitializeEx
rstrtmgr
RmEndSession
RmGetList
RmRegisterResources
RmShutdown
RmStartSession
shlwapi
PathFindExtensionW
ws2_32
htons
ntohs
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE