Static task
static1
General
-
Target
642dd6eb.exe
-
Size
12.1MB
-
MD5
73e5760d65a46d59a8ff7522415993d7
-
SHA1
d235fa44fa3a4f3ebb030e73d386cec0039fd2c2
-
SHA256
6999d26c4aa3b1ac47fafa1fd7eb2ba3cddd01ab9f889a2ae2ad5277e8f8ee7b
-
SHA512
d8ffba7323cd11c46d7c082a68abe137e0dd85e654501bb53f41ae85bc04790cecd0d5d1ec2ecb6d8492f7ce39efb7c1adbd56119b478222d562106ca9c9ed1e
-
SSDEEP
196608:QsfoaLqXcvO5yGIgbZfUSNrd9DarPQYLMPPvjPupG9ZNYRFJvQp3y0A5UN7R3F7u:QsfPLpfGIcfrXK8X8G/6TJe48T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 642dd6eb.exe
Files
-
642dd6eb.exe.exe windows:6 windows x64 arch:x64
c06a7e8b367ac6e8cab98e1e0c5d1943
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
NtQuerySystemInformation
d3d11
D3D11CreateDeviceAndSwapChain
ws2_32
WSAStartup
kernel32
UnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
TranslateMessage
imm32
ImmReleaseContext
d3dcompiler_47
D3DCompile
msvcp140
_Strcoll
vcruntime140
__std_type_info_destroy_list
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
strncmp
api-ms-win-crt-stdio-l1-1-0
fclose
api-ms-win-crt-heap-l1-1-0
realloc
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
ceilf
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-time-l1-1-0
strftime
api-ms-win-crt-runtime-l1-1-0
_errno
advapi32
LsaGetUserName
Sections
.text Size: 908KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 209KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ