Static task
static1
General
-
Target
b5a416733b2944a452149fe93a5ec86a38d3bc3bd7a71403243e3bbd7cf1c9d6
-
Size
84KB
-
MD5
4907431eb4282a540769e2dadf176826
-
SHA1
d26059bc6e27e08dd33bf58ab6a5308b44e542ba
-
SHA256
b5a416733b2944a452149fe93a5ec86a38d3bc3bd7a71403243e3bbd7cf1c9d6
-
SHA512
52962543b07520788943a9d506e6422a0489d31eed50121689d7ae0b5481bcd4ade9a9eb66fe8ffd3cba93fff13087b04b84ec705d4c22da320193b8b2c009f5
-
SSDEEP
1536:nsisiT2LCLT3Nu+u2hvp5llTsyqDg8NIRd5Q//GArRcOAJR:sLo2LaNvuSvp5llTXgI35MDdc5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5a416733b2944a452149fe93a5ec86a38d3bc3bd7a71403243e3bbd7cf1c9d6
Files
-
b5a416733b2944a452149fe93a5ec86a38d3bc3bd7a71403243e3bbd7cf1c9d6.exe windows:4 windows x86 arch:x86
2b018f96d7cda0b915d2c1dcb16595c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetSystemDirectoryA
LockResource
LoadResource
FindResourceA
CopyFileA
Sleep
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
WriteFile
LoadLibraryA
GetVersion
GetModuleFileNameA
TerminateThread
WaitForSingleObject
HeapFree
GetModuleHandleA
GetStringTypeW
GetStringTypeA
CloseHandle
CreateProcessA
lstrlenA
GetLastError
GetSystemTime
GetProcessHeap
HeapAlloc
lstrcpynA
GetTickCount
GetProcAddress
lstrcmpiA
LCMapStringW
LCMapStringA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RtlUnwind
VirtualFree
HeapCreate
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
user32
wsprintfA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
DeleteService
OpenServiceA
StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
GetUserNameA
ws2_32
ntohs
inet_addr
WSAStartup
recv
WSAGetLastError
htons
sendto
ioctlsocket
connect
select
closesocket
gethostname
gethostbyname
socket
send
msvcrt
_beginthreadex
srand
rand
sprintf
_strupr
_endthreadex
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ctzcnzs Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE