Static task
static1
General
-
Target
fd4cd0668aa23ea85fcc25ff8328e8d1018965ba9ec754818b6677f03abb0f24
-
Size
323KB
-
MD5
11ef4960441f5dd1dbe8c137fccd43a2
-
SHA1
6d522e053fba22694184a82e43e74e8752e214b4
-
SHA256
fd4cd0668aa23ea85fcc25ff8328e8d1018965ba9ec754818b6677f03abb0f24
-
SHA512
d0a593882e63f21686fb71644599652a1d3a8b0cb8e46b3b5a50d1abdad5353d2c5dd748453122cf389f1d2dcbf392b8ebfb3253791875ef4c051e6c35454bc9
-
SSDEEP
6144:+dFOWFLblRGGbx3WK45CLbrMQzo+IWzgxj2VJ:+dFFFvlRGyxGK45C7Mz+IKJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd4cd0668aa23ea85fcc25ff8328e8d1018965ba9ec754818b6677f03abb0f24
Files
-
fd4cd0668aa23ea85fcc25ff8328e8d1018965ba9ec754818b6677f03abb0f24.exe windows:5 windows x86 arch:x86
f0e234e2420e60b9bbe2ea061640be35
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
EnumCalendarInfoA
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
InterlockedCompareExchange
WriteConsoleInputA
FreeEnvironmentStringsA
GetModuleHandleW
EnumTimeFormatsA
LoadLibraryW
ReadConsoleInputA
FindNextVolumeW
VerifyVersionInfoA
SetComputerNameExW
FindNextVolumeMountPointW
GetShortPathNameA
LCMapStringA
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
VirtualAlloc
CreateJobSet
CopyFileA
GetTempFileNameA
GetAtomNameA
LoadLibraryA
InterlockedExchangeAdd
SetCalendarInfoW
GetCommMask
GlobalUnWire
EnumDateFormatsW
OpenEventW
GetVersionExA
EnumCalendarInfoExA
SetFileAttributesW
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
Sections
.text Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ