Static task
static1
General
-
Target
getresult.exe
-
Size
5.5MB
-
MD5
e3afd48a497705600fd91bc645235eb4
-
SHA1
d8df3c64674df99e3cf7c416ebf70ee8981356f5
-
SHA256
f14805a4a2f8fe6fef545b407101f4c998c8b433dfb6519753aeb071478b0914
-
SHA512
b3435b57cd537d815abd1411a8f590d778b7140677eba940e52e119c1783c78afc5505d6b47490541f8093e2b8291c3a4c81aef7f2375f7f0b79424745c1aec9
-
SSDEEP
98304:rF8pzjuWBoFxMCmaazRr3e8QvianKICiFHADuCp0yhTaYpjbjxTV/JLgY:y1/ePfmtz9e8qi+GiFHAimHxTXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource getresult.exe
Files
-
getresult.exe.exe windows:4 windows x64 arch:x64
da129b624b8e66d2de6656d5d8f63c8f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
AddFontResourceExA
GdiConvertToDevmodeW
GdiDeleteSpoolFileHandle
GdiEndDocEMF
GetDeviceGammaRamp
GetFontUnicodeRanges
GetPixel
RoundRect
kernel32
CheckElevation
ContinueDebugEvent
CreateFileTransactedA
CreateIoCompletionPort
DeviceIoControl
EnumResourceTypesW
ExitProcess
GetCalendarDateFormatEx
GetCalendarSupportedDateRange
GetConsoleAliasesLengthA
GetLongPathNameW
GetProcAddress
GetTapeParameters
GetUserGeoID
GlobalCompact
LoadLibraryA
LocalReAlloc
ReadFileEx
ResetWriteWatch
SetSystemTime
SetThreadContext
SetUnhandledExceptionFilter
VerifyVersionInfoA
lstrcmpiA
msvcrt
bsearch
clock
free
freopen_s
is_wctype
ispunct
malloc
memcpy
memset
qsort
realloc
strcmp
wcstol
_finite
_execv
shell32
IsLFNDriveW
RestartDialog
SHCreateItemFromRelativeName
SHGetDiskFreeSpaceExW
SHGetFileInfoA
SHInvokePrinterCommandA
SHIsFileAvailableOffline
SHLimitInputEdit
user32
CreateAcceleratorTableW
DefWindowProcW
EditWndProc
EmptyClipboard
GetClassInfoExA
GetClipboardFormatNameA
GetMenuStringA
InSendMessage
IsWindowInDestroy
RemovePropA
SetTimer
SetWindowTextW
TranslateMDISysAccel
UnionRect
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ