Static task
static1
General
-
Target
3fb1232ce461020dbb7a33792d26379e8e1bf8e54290360d6979e0b97744b418
-
Size
700KB
-
MD5
571ea8843de2bd01744f6caba0e202ea
-
SHA1
bec6b297a7625482659c6201949be1bf879cb379
-
SHA256
3fb1232ce461020dbb7a33792d26379e8e1bf8e54290360d6979e0b97744b418
-
SHA512
5993d5e5d6179dccaa57e468c216e79e80718a0969cfae58b36a8a69ac95f38be87e2b0ca8e8440aa972ce7ba4a12c94fd97da18886f30542efecd18fb5429f9
-
SSDEEP
12288:8zlDL8b0kUwWavotiDgwmV2euPJ0p+jj43ex41a7epQEIR0OR6tMwxTln:mln8VUwWavoegVV50J0p+jj9xV70tM6r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fb1232ce461020dbb7a33792d26379e8e1bf8e54290360d6979e0b97744b418
Files
-
3fb1232ce461020dbb7a33792d26379e8e1bf8e54290360d6979e0b97744b418.exe windows:6 windows x64
df189310e344dd9b055fac63e1a0295e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetProcessHeap
CreateFileA
CloseHandle
GetComputerNameA
GetCurrentDirectoryA
HeapWalk
CreateActCtxA
ActivateActCtx
DeactivateActCtx
GetTempPathA
ReadFile
LockFile
UnlockFile
SetFileAttributesA
ReleaseActCtx
SetFileTime
CreateNamedPipeA
WaitNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
ExitProcess
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryExW
LCMapStringW
GetStdHandle
GetFileType
GetStartupInfoW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GetACP
GetStringTypeW
RaiseException
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetStdHandle
GetCPInfo
IsValidCodePage
GetOEMCP
GetModuleHandleExW
SetFilePointerEx
WriteConsoleW
GetModuleFileNameW
ReadConsoleW
CreateFileW
HeapSize
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
FindClose
FindFirstFileExW
FindNextFileW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 334KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 240KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ