Static task
static1
General
-
Target
q178rxnil2fuipw1.exe
-
Size
14.3MB
-
MD5
9b36250cd67ffffb873eef13cfed9027
-
SHA1
0bbf485b69cd94ca9fe6be570219e806b6ac5937
-
SHA256
8335d97b11d58c007abe333ac5400fff3fb394a3becb8a1f10cae921b1e3c5b4
-
SHA512
6a05aad84cc70f7e7ccfb242a34a977e9b537ff75bb8fbfc9c018188fc5cc28197fab2e9476e6d5107bbbca617c3e404d01ca7f1224bc2c7eaa32e9c7519c574
-
SSDEEP
393216:+UKZw1CqEDs+PkE156WQWLSB+gRcsLPEivQmM:cj4+cEtQWOpTvQm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource q178rxnil2fuipw1.exe
Files
-
q178rxnil2fuipw1.exe.exe windows x64
444c974be180e5a014ac40402b6bd9fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
closesocket
opengl32
glBindTexture
kernel32
FreeLibrary
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SetWindowLongPtrA
gdi32
DeleteObject
advapi32
CryptGenRandom
shell32
DragQueryPoint
imm32
ImmSetCompositionWindow
Sections
wP<Ng;J1 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
o.sH:?B6 Size: - Virtual size: 658KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BGM0;dUp Size: - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hDcDO'M_ Size: - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
&OZybgG[ Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I9aDZYAk Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PF>Ynfme Size: - Virtual size: 9.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
3k/q&>$? Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rtgl3dgD Size: 14.3MB - Virtual size: 14.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
nk@Jm_vo Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T$KTbRh^ Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ