Static task
static1
General
-
Target
NineDestroyaIJA.EXE
-
Size
3.1MB
-
MD5
0c372183277164bb4c8b77a7baa17599
-
SHA1
298f5478448c10a1749f4024e34633e9fee411dc
-
SHA256
e5b70587a5a0b4f70e66cef9705657c0d7e7864240ba504767f97c91590319aa
-
SHA512
30facac76ddb25f90b8425474b9691b3efb3e5fa2f83a50ddb623bbd572d0d96439526768ab18fb440082fa8988a428e15683e6eed72cd7af5ff7651788a4070
-
SSDEEP
49152:eXrHQ59lVlqopIktUd7LlBgZtaYa3W555Fqh7BAcNYWC6J9LdnMhJslR:eM8RCamkBAcNYqLJnvlR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NineDestroyaIJA.EXE
Files
-
NineDestroyaIJA.EXE.exe windows x64
e6ae1a02289fbcfab008465846fbccaa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
HeapQueryInformation
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
GetStdHandle
IsValidCodePage
GetStringTypeW
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
IsValidLocale
EnumSystemLocalesW
LCMapStringW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
IsDebuggerPresent
RtlPcToFileHeader
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwindEx
RtlLookupFunctionEntry
GetProcAddress
GetCommandLineA
FindResourceExW
VirtualProtect
SearchPathA
GetTickCount
Sleep
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
lstrcpyA
GetACP
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
GetVolumeInformationA
lstrcmpiA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
GetVersionExA
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
ExitProcess
ExitThread
GetProfileIntA
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetModuleFileNameA
GetUserDefaultLCID
GetTempFileNameA
GetFullPathNameA
GetFileTime
GetFileAttributesA
ResumeThread
SetThreadPriority
WaitForSingleObject
CloseHandle
lstrcmpA
RaiseException
CompareStringA
GlobalFindAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalGetAtomNameA
GlobalAddAtomA
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
GetCurrentProcessId
OutputDebugStringA
MultiByteToWideChar
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
LocalFileTimeToFileTime
GetCurrentDirectoryA
SetFilePointer
DeleteCriticalSection
GetModuleHandleA
DecodePointer
HeapSize
GetLastError
InitializeCriticalSectionEx
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
FindNextFileNameW
SetThreadpoolThreadMinimum
FindNextChangeNotification
SetCurrentDirectoryW
FatalExit
WideCharToMultiByte
SetCalendarInfoW
EnumSystemFirmwareTables
EnumResourceLanguagesA
OpenEventA
EncodePointer
GetLongPathNameW
CreateSymbolicLinkA
GetFullPathNameW
CloseThreadpoolWork
FlushInstructionCache
AddAtomW
user32
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
PostThreadMessageA
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
EndDialog
CreateDialogIndirectParamA
GetMenuDefaultItem
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetNextDlgTabItem
GetIconInfo
DrawIconEx
DrawFocusRect
GetNextDlgGroupItem
LockWindowUpdate
SetCapture
WindowFromPoint
KillTimer
SetTimer
LoadMenuW
LoadAcceleratorsW
CharUpperA
CopyImage
SetParent
DeleteMenu
GetSystemMenu
IsRectEmpty
UnionRect
RealChildWindowFromPoint
ShowOwnedPopups
PostQuitMessage
SystemParametersInfoA
GetMenuItemInfoA
MapVirtualKeyA
GetKeyNameTextA
InflateRect
LoadCursorA
GetSysColorBrush
GetSystemMetrics
GetCursorPos
TranslateMessage
GetMessageA
FillRect
ClientToScreen
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
IsDialogMessageA
DrawIcon
SendDlgItemMessageA
CheckDlgButton
MoveWindow
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoA
MonitorFromWindow
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
SetWindowsHookExA
GetTopWindow
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
PtInRect
MapWindowPoints
ScreenToClient
MessageBoxA
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
CreateWindowExA
GetClassInfoExA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
DispatchMessageA
RegisterWindowMessageA
ReuseDDElParam
UnpackDDElParam
WinHelpA
LoadImageA
DestroyIcon
LoadIconW
GetWindow
GetLastActivePopup
GetWindowThreadProcessId
GetClassNameA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
EqualRect
OffsetRect
IntersectRect
CopyRect
SetRectEmpty
GetSysColor
SetCursor
SetActiveWindow
GetWindowRgn
DestroyCursor
MapDialogRect
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
FrameRect
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongPtrA
SetCursorPos
SetWindowTextA
CopyAcceleratorTableA
InsertMenuItemA
DestroyMenu
CreatePopupMenu
SetMenu
GetMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
IsWindowEnabled
ReleaseCapture
GetCapture
GetKeyState
GetActiveWindow
SetFocus
GetDlgItem
BringWindowToTop
IsWindowVisible
SetWindowPos
ShowWindow
GetClassInfoA
PostMessageA
PeekMessageA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
UnhookWindowsHookEx
GetParent
AdjustWindowRectEx
UpdateWindow
GetFocus
GetDlgCtrlID
IsIconic
IsChild
SendMessageA
SetRect
RedrawWindow
InvalidateRect
IsWindow
EnableWindow
EndPaint
gdi32
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32A
GetBkColor
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetTextMetricsA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
SetViewportExtEx
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
SetROP2
SetPolyFillMode
GetLayout
SetLayout
ExtTextOutA
TextOutA
MoveToEx
SetTextAlign
Polyline
CopyMetaFileA
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
CreateBitmap
GetObjectA
SetTextColor
SetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
CreateDCA
msimg32
AlphaBlend
TransparentBlt
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegEnumKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
AccessCheckByTypeAndAuditAlarmW
RegQueryInfoKeyA
RegCreateKeyExA
OpenBackupEventLogA
InitializeSid
shell32
SHGetDesktopFolder
SHAssocEnumHandlers
ord680
DragQueryFileA
DragFinish
SHGetFileInfoA
SHAppBarMessage
SHBrowseForFolderA
SHGetPropertyStoreFromParsingName
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
shlwapi
PathIsUNCA
PathStripToRootA
PathFindFileNameA
StrFormatKBSizeA
PathFindExtensionA
PathRemoveFileSpecW
uxtheme
GetThemePartSize
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
ole32
OleLockRunning
DoDragDrop
CoInitializeEx
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoDisconnectObject
oleaut32
SysFreeString
SysAllocString
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
gdiplus
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 709KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 246KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ