Static task
static1
General
-
Target
EF78B82B104F2A0159473A12BAAC7CE2F87B0BA7C29301BDDF8823609587C217BAE75FD2C8E841E1E36C
-
Size
200KB
-
MD5
fc8025184951f4222b6846cbc9b165de
-
SHA1
99694a93fe11ccae966969f9bc41d87d2f5cb4ca
-
SHA256
5c153913bd8db6d5ccd19204c1741608a6e4a10b61b826bdec8d9b5e6c310bf9
-
SHA512
2d1eed3222b335cbf83798d9a6c9d99b64d86bf68724e59fb3907a87b18841ffd5f5c0b8f4e9cb91c0cd3090c3d528b262db79da9e16a105a33c4e08f21373ba
-
SSDEEP
6144:KdcppjI6Ny1ly+/7A9j+6ogRAOkmo+dG:Kdcvy1I+/7pGRxRG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EF78B82B104F2A0159473A12BAAC7CE2F87B0BA7C29301BDDF8823609587C217BAE75FD2C8E841E1E36C
Files
-
EF78B82B104F2A0159473A12BAAC7CE2F87B0BA7C29301BDDF8823609587C217BAE75FD2C8E841E1E36C.exe windows x86
199d4e8bfb0ba9fbe37238c1f0c6381f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalMemoryStatusEx
Sleep
FindFirstFileA
FindNextFileA
GetTempPathA
WideCharToMultiByte
ReadFile
GetFileSizeEx
FindClose
GetLastError
CreateFileA
CloseHandle
VirtualAlloc
CopyFileA
CreateProcessA
DecodePointer
WriteConsoleW
SetEndOfFile
ReadConsoleW
CreateFileW
HeapReAlloc
HeapSize
GetStringTypeW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
LocalFree
RtlUnwind
RaiseException
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
ole32
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoUninitialize
oleaut32
SysAllocString
VariantClear
SysFreeString
ws2_32
setsockopt
htons
inet_ntop
recv
connect
closesocket
WSAStartup
inet_addr
send
socket
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ