Static task
static1
General
-
Target
2412a82f5d8c13a324a3763817780b17d1f17ed4b9b76a860520e31b541bbc75
-
Size
636KB
-
MD5
9c860033c75dd0e1644b925392a13077
-
SHA1
06fcf5ea984001713547df547ea7104b51df0227
-
SHA256
2412a82f5d8c13a324a3763817780b17d1f17ed4b9b76a860520e31b541bbc75
-
SHA512
c8a46d2bed3e9c2a945cdea189657450accac5d940b5893b8bea4c5eb9f10b920c524e4db1365fe9cc561581413153ac131e20589f4efa2aedfc0f28bb90150b
-
SSDEEP
6144:JfIJs1RHFDIOVkzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1h:dYmstcH5049Duca049Duc1y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2412a82f5d8c13a324a3763817780b17d1f17ed4b9b76a860520e31b541bbc75
Files
-
2412a82f5d8c13a324a3763817780b17d1f17ed4b9b76a860520e31b541bbc75.exe windows x64
c4a784232bca53e5d6c372fa53bf8d4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
TraceMessage
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyExW
EventRegister
EventWrite
EventUnregister
RegGetValueW
RegQueryValueExW
kernel32
GetCurrentProcessId
GlobalDeleteAtom
HeapAlloc
GetProcessHeap
GetSystemDirectoryW
GetLocaleInfoW
UnhandledExceptionFilter
FormatMessageW
GlobalAddAtomW
GetTickCount64
GetTickCount
ReleaseMutex
RegisterApplicationRestart
SetProcessShutdownParameters
CloseHandle
GetLastError
CreateMutexW
Sleep
CompareStringW
GetModuleHandleW
IsProcessInJob
GetCurrentProcess
GetCurrentThreadId
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
gdi32
SetStretchBltMode
CombineRgn
CreateRectRgn
LineTo
MoveToEx
SetBkMode
SetTextColor
CreateSolidBrush
StretchBlt
GetStockObject
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
DeleteDC
SelectObject
DeleteObject
CreateBrushIndirect
CreateBitmap
user32
GetAsyncKeyState
FindWindowW
PostMessageW
CallNextHookEx
LoadStringW
SetForegroundWindow
SetWindowsHookExW
SystemParametersInfoW
UnhookWindowsHookEx
ShowSystemCursor
GetSystemMetrics
GetWindowLongW
GetAncestor
PtInRect
EqualRect
GetDesktopWindow
GetWindowRect
IsRectEmpty
OffsetRect
MonitorFromPoint
GetMonitorInfoW
CopyRect
RemovePropW
CloseDesktop
GetUserObjectInformationW
GetThreadDesktop
SetWindowPlacement
SendInput
CheckMenuRadioItem
InsertMenuItemW
GetMessagePos
GetKeyState
WindowFromPhysicalPoint
ShowWindow
SetTimer
KillTimer
ClipCursor
DestroyWindow
IsWindow
GetPhysicalCursorPos
CreateWindowExW
UnionRect
RegisterClassExW
UpdateWindow
IsIconic
MonitorFromRect
DefWindowProcW
GetGUIThreadInfo
SetRect
InflateRect
IntersectRect
GetWindowLongPtrW
SetWindowLongPtrW
LoadCursorW
SetWindowRgn
RegisterClassW
FillRect
CreatePopupMenu
GetDoubleClickTime
SendMessageTimeoutW
RealGetWindowClassW
GetClassNameW
SetWinEventHook
UnhookWinEvent
SetDlgItemTextW
SetCursor
TrackPopupMenu
PostQuitMessage
ord2001
SetMagnificationDesktopMagnification
SetMagnificationDesktopColorEffect
SetLayeredWindowAttributes
SetPropW
GetParent
GetDlgCtrlID
MapWindowPoints
EnableWindow
MonitorFromWindow
SetFocus
CheckDlgButton
SendDlgItemMessageW
LoadImageW
GetSysColor
CreateDialogParamW
GetDlgItem
GetCursorPos
GetWindowThreadProcessId
UpdateLayeredWindow
ReleaseDC
GetDC
IsWindowEnabled
GetForegroundWindow
GetCapture
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
RegisterHotKey
UnregisterHotKey
SetRectEmpty
GetWindow
SetWindowPos
AdjustWindowRectEx
IsWindowVisible
SendMessageW
LoadIconW
SetWindowLongW
SetPhysicalCursorPos
EnumDisplayMonitors
InvalidateRect
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
AdjustWindowRect
GetClientRect
EndPaint
BeginPaint
msvcrt
memset
memcpy
ceilf
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
_vsnwprintf
_purecall
??2@YAPEAX_K@Z
wcstok
??3@YAXPEAX@Z
_wcsicmp
ceil
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleacc
AccessibleObjectFromEvent
AccessibleObjectFromWindow
comctl32
ord17
ord345
InitCommonControlsEx
oleaut32
SysFreeString
VariantInit
VariantClear
gdiplus
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipCloneImage
GdipDisposeImage
GdipFillPolygonI
GdipFillRectangleI
GdipDrawPolygonI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
shell32
SHAppBarMessage
ShellExecuteW
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
WinSqmAddToStream
WinSqmSetDWORD
WinSqmIsOptedIn
WinSqmIncrementDWORD
shlwapi
ord628
StrCmpW
dwmapi
DwmSetWindowAttribute
DwmIsCompositionEnabled
dui70
InitProcessPriv
InitThread
UnInitProcessPriv
UnInitThread
??0NativeHWNDHost@DirectUI@@QEAA@XZ
??1NativeHWNDHost@DirectUI@@UEAA@XZ
?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z
?EndDefer@Element@DirectUI@@QEAAXK@Z
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
StrToID
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z
?DestroyWindow@NativeHWNDHost@DirectUI@@QEAAXXZ
?WndProc@HWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z
?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ
?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z
?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z
?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetClassInfoW@HWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
?GetClassInfoPtr@CCPushButton@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetKeyFocusedElement@HWNDElement@DirectUI@@SAPEAVElement@2@XZ
?GetLocation@Element@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z
?Click@Button@DirectUI@@SA?AVUID@@XZ
?SetEnabled@Element@DirectUI@@QEAAJ_N@Z
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
??0HWNDElement@DirectUI@@QEAA@XZ
?OnEvent@HWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
?GetExtent@Element@DirectUI@@QEAAPEBUtagSIZE@@PEAPEAVValue@2@@Z
?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z
?Add@Element@DirectUI@@QEAAJPEAV12@@Z
?LoadFromResource@DUIFactory@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG1PEAVElement@2@PEAKPEAPEAV42@1@Z
?Destroy@Layout@DirectUI@@QEAAXXZ
?SetLayout@Element@DirectUI@@QEAAJPEAVLayout@2@@Z
?Create@FillLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z
?DoubleBuffered@Element@DirectUI@@QEAAX_N@Z
?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z
?SetActive@Element@DirectUI@@QEAAJH@Z
?Release@Value@DirectUI@@QEAAXXZ
?SetVisible@Element@DirectUI@@QEAAJ_N@Z
?Initialize@HWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z
?Register@HWNDElement@DirectUI@@SAJXZ
?Destroy@Element@DirectUI@@QEAAJ_N@Z
??1DUIFactory@DirectUI@@QEAA@XZ
??1HWNDElement@DirectUI@@UEAA@XZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnInput@HWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnDestroy@HWNDElement@DirectUI@@UEAAXXZ
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
magnification
MagSetWindowTransform
MagSetWindowSource
MagUninitialize
MagInitialize
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ