Static task
static1
General
-
Target
Turbobit.net-Unbegrenzte-und-schnelle-Daten-Cl-837485.zip
-
Size
22.7MB
-
MD5
e427bc9b15e953a5b26d06e0c4428617
-
SHA1
1371998b7bfabf3811d65e39efbb5f122a3f4f7d
-
SHA256
4fb585bf2da5933d085cc8861f9c51be91e8cf0e56dbd91d46de79a1b15af56c
-
SHA512
53322396618dcf3525a3af6592f57ec6b25a48f5befc096ea527e03a82632c87fcddc51d27266218fd3175b056354e05af9438c61335e5f251cf7fd8744b8f1b
-
SSDEEP
393216:zEswQgahWB0EunDr3AMhNwTGTXrASb2ttrNFVKN5I5wx9oE1YutFMUPuB7jgYiZG:zEbQLhYtunDTNi6rASb2ttrNFsAUj4td
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Install_01210.exe
Files
-
Turbobit.net-Unbegrenzte-und-schnelle-Daten-Cl-837485.zip.zip
-
Install_01210.exe.exe windows:6 windows x86 arch:x86
b29b91a7ec90d68903236c0410551a82
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriority
CreateEventW
GetFileInformationByHandle
GetStringTypeW
TlsSetValue
FormatMessageW
lstrcatA
LocalFree
GetDateFormatW
GetSystemTimeAsFileTime
CreateFileA
GetLogicalDriveStringsW
DeleteFileW
GetFileSizeEx
GetModuleFileNameW
ReleaseSemaphore
FindClose
GetEnvironmentStringsW
DeleteTimerQueueTimer
UnregisterWaitEx
TryEnterCriticalSection
FindNextFileW
GetConsoleCP
WriteConsoleW
EncodePointer
GetFullPathNameW
GetCurrentThread
InterlockedPushEntrySList
GetLogicalDriveStringsA
AreFileApisANSI
InitializeSListHead
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
GetSystemDirectoryW
GlobalAlloc
GetLastError
LoadLibraryExW
MoveFileA
GetModuleHandleExW
GetCurrentProcessId
RemoveDirectoryW
InitializeCriticalSectionEx
TlsFree
GlobalFree
GetFileAttributesA
IsValidCodePage
FormatMessageA
GetVersionExA
SetStdHandle
FindFirstFileA
QueryDepthSList
RemoveDirectoryA
GetCommandLineW
WaitForSingleObjectEx
GetCurrentThreadId
PeekNamedPipe
CreateSemaphoreA
WriteFile
TlsAlloc
SetUnhandledExceptionFilter
ChangeTimerQueueTimer
QueryPerformanceFrequency
lstrlenA
GetEnvironmentVariableA
HeapFree
GetStartupInfoW
GlobalLock
VerSetConditionMask
GetCurrentDirectoryW
LoadLibraryW
InterlockedFlushSList
GetUserDefaultLCID
SetEnvironmentVariableA
SetEndOfFile
GetACP
FreeEnvironmentStringsW
VirtualProtect
ExitProcess
SetPriorityClass
FindNextFileA
CompareFileTime
InitializeCriticalSection
GetTickCount64
FileTimeToSystemTime
SwitchToThread
InterlockedPopEntrySList
SetThreadAffinityMask
SetFileAttributesA
WideCharToMultiByte
GetOEMCP
CreateTimerQueueTimer
FindFirstFileExA
GetCurrentDirectoryA
UnhandledExceptionFilter
GetProcessHeap
GetFileSize
GetConsoleMode
GetNumaHighestNodeNumber
SetFilePointer
HeapAlloc
CreateTimerQueue
SetFileTime
GetVersionExW
WaitForSingleObject
GetSystemInfo
GetDriveTypeW
GetModuleHandleW
IsValidLocale
GetProcAddress
GetProcessAffinityMask
GlobalMemoryStatus
FreeLibrary
CreateEventA
GetVersion
SetFilePointerEx
MultiByteToWideChar
VirtualFree
RtlUnwind
SleepEx
VerifyVersionInfoW
ResetEvent
IsProcessorFeaturePresent
GetThreadTimes
CompareStringW
CreateThread
GetTickCount
CreateDirectoryW
SetLastError
GetLogicalProcessorInformation
TerminateProcess
GetStdHandle
GetLocaleInfoW
GetThreadPriority
CloseHandle
HeapSize
LeaveCriticalSection
RaiseException
CreateFileW
GetModuleFileNameA
QueryPerformanceCounter
FlushFileBuffers
LoadLibraryA
ExitThread
ReadConsoleW
MoveFileW
EnterCriticalSection
MoveFileExW
TlsGetValue
DuplicateHandle
ReleaseSRWLockExclusive
CreateDirectoryA
HeapReAlloc
DecodePointer
ReadFile
WaitForMultipleObjects
RegisterWaitForSingleObject
SetEvent
GlobalUnlock
GetFileAttributesExW
GetFileAttributesW
Sleep
EnumSystemLocalesW
GetModuleHandleA
AcquireSRWLockExclusive
FileTimeToLocalFileTime
SignalObjectAndWait
UnregisterWait
IsDebuggerPresent
DeleteFileA
SystemTimeToTzSpecificLocalTime
GetTimeFormatW
SetFileAttributesW
VirtualAlloc
GetCommandLineA
LCMapStringW
GetTimeZoneInformation
GetFileType
FindFirstFileW
FreeLibraryAndExitThread
DeleteCriticalSection
GetCPInfo
user32
MapDialogRect
CheckDlgButton
EnableWindow
SetFocus
EndDialog
GetWindowLongA
GetParent
IsDlgButtonChecked
SetClipboardData
GetMonitorInfoA
EmptyClipboard
CloseClipboard
GetKeyState
CharUpperA
wsprintfA
ShowWindow
SendMessageW
SetWindowTextW
MessageBoxW
GetWindowRect
DialogBoxParamA
LoadIconA
SetTimer
GetWindowTextLengthW
GetFocus
SetCursor
SetWindowLongA
SetWindowTextA
MonitorFromWindow
InvalidateRect
GetWindowTextA
OpenClipboard
SystemParametersInfoA
GetWindowTextW
GetWindowTextLengthA
CharUpperW
PostMessageA
LoadCursorA
LoadStringA
MoveWindow
MessageBoxA
SendMessageA
ScreenToClient
LoadStringW
DialogBoxParamW
GetDlgItem
KillTimer
advapi32
CryptDestroyHash
CryptAcquireContextW
CryptGetHashParam
CryptReleaseContext
CryptHashData
CryptEncrypt
CryptImportKey
CloseServiceHandle
CryptCreateHash
CryptDestroyKey
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderPathW
SHGetFileInfoA
ole32
CoUninitialize
OleInitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
oleaut32
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VariantClear
bcrypt
BCryptGenRandom
crypt32
CertGetCertificateChain
CertFindCertificateInStore
CryptStringToBinaryW
PFXImportCertStore
CryptDecodeObjectEx
CertFreeCertificateChain
CertFindExtension
CertOpenStore
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertFreeCertificateContext
CryptQueryObject
CertCloseStore
CertAddCertificateContextToStore
CertGetNameStringW
CertEnumCertificatesInStore
wldap32
ord301
ord147
ord133
ord79
ord142
ord167
ord127
ord27
ord145
ord219
ord46
ord14
ord216
ord73
ord208
ord41
ord117
ord26
ws2_32
WSAIoctl
WSACreateEvent
recvfrom
sendto
getpeername
ioctlsocket
gethostname
socket
getsockopt
send
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAEventSelect
getaddrinfo
WSACloseEvent
WSAResetEvent
closesocket
WSAGetLastError
ntohs
WSASetLastError
WSAStartup
WSACleanup
htons
setsockopt
freeaddrinfo
__WSAFDIsSet
select
accept
bind
connect
getsockname
htonl
listen
recv
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ