Static task
static1
General
-
Target
LameXP.2021-08-29.Release-Static.Build-2320.exe
-
Size
36.3MB
-
MD5
04b482e84a767b92ddce6012c256d899
-
SHA1
bc0217751c39aa7505209b90c483cb1a79f6dfd1
-
SHA256
61f4f9d0aea9965fa9381477f2e7cf8f5559d8c9624745a8a33bea764e3aa94e
-
SHA512
739a5fd992971c80cd84a1100293249273b8fc933a6a127e66cb566a11aed3c25ea526fb52b1defad41d2cba5f04455bfde60bda4b616a5e756b9cf5ea0ad64d
-
SSDEEP
786432:6RuY4bUvHyPPVrr8cY5UKCbMIgC3LlFOCs40NI:6Ru8PyPP9gcY5UnMBCblFOCs4mI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LameXP.2021-08-29.Release-Static.Build-2320.exe
Files
-
LameXP.2021-08-29.Release-Static.Build-2320.exe.exe windows x86
10b5c67652ffa477e59b64075471f716
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetLastError
AreFileApisANSI
LoadLibraryExW
LoadLibraryW
GetModuleFileNameW
GetModuleFileNameA
FormatMessageA
FormatMessageW
LocalFree
CreateDirectoryW
GetModuleHandleW
GetTickCount
SetFileTime
GetWindowsDirectoryA
GetSystemDirectoryW
CreateFileW
GetTempPathW
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryW
SetLastError
GetProcAddress
RemoveDirectoryA
SetFileAttributesA
SetCurrentDirectoryW
RemoveDirectoryW
GetCurrentDirectoryA
GetCurrentThreadId
CloseHandle
GetWindowsDirectoryW
DeleteFileW
GetCurrentProcessId
GetTempPathA
SetFileAttributesW
DeleteFileA
FindFirstFileW
GetFileAttributesA
GetFileAttributesW
FindFirstFileA
FindClose
FindNextFileA
GetModuleHandleA
FindNextFileW
CreateFileA
GetFileSize
SetFilePointer
SetEndOfFile
WriteFile
ReadFile
GlobalMemoryStatus
GetCurrentProcess
GetSystemInfo
GetProcessAffinityMask
GetStdHandle
GetFileInformationByHandle
WaitForMultipleObjects
VirtualFree
VirtualAlloc
GetVersionExA
lstrlenW
lstrcatW
WaitForSingleObject
SetEvent
InitializeCriticalSection
CreateEventA
ResetEvent
GetCommandLineW
CreateProcessA
RaiseException
GetStringTypeW
LCMapStringW
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ExitProcess
HeapCreate
IsProcessorFeaturePresent
GetStartupInfoW
HeapSetInformation
GetCommandLineA
CreateThread
ExitThread
HeapReAlloc
HeapAlloc
HeapFree
user32
GetForegroundWindow
GetActiveWindow
IsWindowVisible
SetTimer
KillTimer
LoadIconA
EndDialog
PostMessageA
MessageBoxW
SetWindowTextA
SetWindowTextW
LoadStringA
LoadStringW
DialogBoxParamW
SetWindowLongA
GetWindowLongA
GetDlgItem
DialogBoxParamA
CharUpperA
CharUpperW
EndPaint
DestroyWindow
GetWindowRect
FillRect
LoadImageW
SetCapture
SetForegroundWindow
DrawTextExW
BeginPaint
TranslateMessage
GetWindowLongW
SystemParametersInfoW
PeekMessageW
SetWindowLongW
DefWindowProcA
SetWindowPos
ShowWindow
CreateWindowExW
MoveWindow
DispatchMessageW
SendMessageA
shell32
ShellExecuteExA
SHGetFolderPathW
SHGetFolderPathA
oleaut32
SysAllocStringLen
VariantClear
SysStringLen
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ