Static task
static1
General
-
Target
PadvishTS-en.exe
-
Size
136.9MB
-
MD5
ea35c93ff93ed19793a1869a0e48cecc
-
SHA1
5e2e36f7ae4848adbf9a2479a3e8728b43e46818
-
SHA256
9fd75d8847816318588f6f40a70b3e25dbb094b9f874369c4e3ea38ee4010d4a
-
SHA512
19daeb0afb8be2a5e42f3d76c1f0e6cc0818ae30b90dadfcc0f068ff78c51cc4c8f1ffbba54d3283d9af38c4819a4ea6fb8b42eefd84b9f8a476f38e75e850e8
-
SSDEEP
3145728:cmREgEgFwasmuNOGGIpJymR8l3ir9+WQDww7YhAXUNTdc3RzQQ8YY2m9ah:hEFgFwaXOGIVR9r9Ut7YhpN5e83j2m9C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PadvishTS-en.exe
Files
-
PadvishTS-en.exe.exe windows x86
d4711e605f6797983e23c017023744f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
LocalFree
QueryPerformanceFrequency
GetModuleFileNameW
GetLastError
WaitForSingleObject
CloseHandle
CreateProcessW
GetVersionExW
GetFileAttributesW
GetCurrentProcess
IsWow64Process
OutputDebugStringA
CreateDirectoryW
GetTempPathW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
GetTickCount
SetFilePointer
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ReadFile
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
HeapFree
HeapAlloc
SetLastError
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
GetConsoleCP
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
HeapReAlloc
CreateFileW
SetStdHandle
FlushFileBuffers
WriteConsoleW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
OutputDebugStringW
GetStringTypeW
SetEndOfFile
GetFileSize
user32
DispatchMessageW
GetDlgItem
PeekMessageW
DestroyWindow
MessageBoxW
ShowWindow
SendMessageW
CreateDialogParamW
TranslateMessage
shell32
CommandLineToArgvW
comctl32
InitCommonControlsEx
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
Sections
.text Size: 524KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ