Static task
static1
General
-
Target
ebe8ebc089a026b955ee00e969ee472379d95093c177b01eed57f5e8a94896f8
-
Size
1.1MB
-
MD5
0ebee601987db9f9c5a0c4042bb9a134
-
SHA1
692f555591be88a28b52d3c28b12555f6e1829fa
-
SHA256
ebe8ebc089a026b955ee00e969ee472379d95093c177b01eed57f5e8a94896f8
-
SHA512
9d5e1721e0442ee85664cc97e154ae6e08ea814e0c8c57b0cb0e5c55fe8d36c244fb4d37a3eb1541021879ce7d089ee121c2fb320c131f16857c84e62616a22c
-
SSDEEP
3072:44UVgWq7Y+jbkGenScL1FsrKY/gnl4PNN0Bi3434YFOmOXoHOZNxjRIp6WMHmIsx:qLqel7oe4nmOXouZqhXJa5Ga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebe8ebc089a026b955ee00e969ee472379d95093c177b01eed57f5e8a94896f8
Files
-
ebe8ebc089a026b955ee00e969ee472379d95093c177b01eed57f5e8a94896f8.exe windows:4 windows x86 arch:x86
3df6f705cb183d81244468f68ffcc9c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAllocEx
GetLastError
SetUnhandledExceptionFilter
GetCurrentProcess
CloseHandle
LocalFree
FormatMessageW
CreateProcessW
GetSystemDirectoryW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
GetConsoleTitleW
_lread
PeekConsoleInputA
CreateWaitableTimerW
GetFileSizeEx
WriteFile
Module32Next
GetCommState
LocalFlags
Sleep
CopyFileW
SetFileAttributesW
RemoveDirectoryW
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
IsDebuggerPresent
MoveFileW
DeleteFileW
user32
AnyPopup
CharNextW
CharNextA
MessageBoxW
SendIMEMessageExW
ScreenToClient
RegisterHotKey
GetDCEx
VkKeyScanExA
RegisterWindowMessageW
SendMessageW
EnableWindow
IsWindowVisible
RedrawWindow
IsWindow
SetCursor
LoadCursorW
PostQuitMessage
KillTimer
SetTimer
GetClientRect
GetWindowRect
GetSystemMenu
RemoveMenu
PtInRect
gdi32
GetStockObject
RealizePalette
GetEUDCTimeStampExW
GetEnhMetaFileA
CreatePolygonRgn
LineDDA
GdiEntry9
GdiAddGlsRecord
CreateMetaFileW
Ellipse
StretchDIBits
SetTextCharacterExtra
CreateDIBPatternBrushPt
GdiStartPageEMF
SetViewportOrgEx
GdiGetLocalFont
GetGraphicsMode
CreateDCW
GdiConvertMetaFilePict
GetObjectW
CreateMetaFileA
GdiConvertDC
EngCheckAbort
RectInRegion
Chord
EngPaint
PATHOBJ_bEnumClipLines
SetPixelV
SetLayout
EngGetCurrentCodePage
SetTextAlign
SetGraphicsMode
advapi32
RegOpenKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shell32
SHChangeNotify
SHFileOperationW
SHGetDesktopFolder
SHGetFileInfoW
ShellExecuteExW
Shell_NotifyIconA
DragQueryFileAorW
SHFreeNameMappings
SHGetSettings
SHGetDiskFreeSpaceA
SHInvokePrinterCommandW
DuplicateIcon
SHFormatDrive
DragAcceptFiles
SHGetFolderPathA
DoEnvironmentSubstW
ShellAboutA
SHFileOperation
SHAppBarMessage
ExtractIconExA
SHCreateDirectoryExA
SHQueryRecycleBinA
SHFileOperationA
SHGetDataFromIDListA
SHGetIconOverlayIndexW
ExtractIconA
SHCreateProcessAsUserW
SHBindToParent
SHGetFileInfoA
DragQueryFileA
SHGetInstanceExplorer
SHBrowseForFolder
ShellExecuteW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
shlwapi
StrCmpNW
StrCmpNIA
StrStrIA
StrChrIA
Sections
.text Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 293B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t4xt12 Size: 359KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
.t4xt11 Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ