Static[.]exe | Triage™

Resubmissions

12/07/2026, 00:05

260712-adcjtabs6l3

12/07/2026, 00:03

260712-aceb1sdt8x3

Sharing

Copy URL Twitter E-mail

General

Target
Static.exe
Size 3.4MB
Sample260712-adcjtabs6l
SHA256 fa14d55041b846adf46909eb908976cae421caacbffac9c8735aa75a4cb5254c
MD5 57d7473ed44fe61db7212ae9e825c1d2
SHA1 b3352bb9776b1d93c225bdbb00e0f1a1b2ed7f41
SHA512 40d280f17832eb89cee66cfd5ecc13b1ff2528b8e067d9051c26be192bf89d373f536fdfed1e182afbb7e1088939ac1fc0d136e6245dcc6ee4bdfd6e9e94582c
SSDEEP 49152:Szlmvsffh5C8RlIJTtqEyWF6yI595L5FvOPLrMX/50u8BG1mQwnOS5Ik18LOkNNx:EXBw/YgPLrMX/50u8BG1BkWiMf
TLSH
T1B4F5C082B3A541F8C16BD138C6565627E73234580331ABEF37DC8A691F63BE05A7EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Static.exe

File Explorer

Static.exe

.exe 3.4MB

Static.exe

IMPHASH 9c9c42f9ea0104d1bf6a89c9295054ce
SHA256 fa14d55041b846adf46909eb908976cae421caacbffac9c8735aa75a4cb5254c
MD5 57d7473ed44fe61db7212ae9e825c1d2
SHA1 b3352bb9776b1d93c225bdbb00e0f1a1b2ed7f41
SHA512 40d280f17832eb89cee66cfd5ecc13b1ff2528b8e067d9051c26be192bf89d373f536fdfed1e182afbb7e1088939ac1fc0d136e6245dcc6ee4bdfd6e9e94582c
SSDEEP 49152:Szlmvsffh5C8RlIJTtqEyWF6yI595L5FvOPLrMX/50u8BG1mQwnOS5Ik18LOkNNx:EXBw/YgPLrMX/50u8BG1BkWiMf
TLSH
T1B4F5C082B3A541F8C16BD138C6565627E73234580331ABEF37DC8A691F63BE05A7EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1957040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Zem\Desktop\xxx\build\Static.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

kernel32

GlobalLock GetModuleHandleW SetLastError FormatMessageW ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSection EnterCriticalSection LeaveCriticalSection LocalFree GetSystemDirectoryW LoadLibraryW SleepEx GetTickCount MoveFileExW WaitForSingleObjectEx GetEnvironmentVariableA GetFileType PeekNamedPipe WaitForMultipleObjects GetCurrentProcessId VerifyVersionInfoW FormatMessageA GetLocaleInfoEx CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GlobalFree DeleteCriticalSection InitializeCriticalSectionEx GetFileAttributesExW SetFileInformationByHandle CreateFile2 AreFileApisANSI GetFileInformationByHandleEx SleepConditionVariableSRW GetCurrentThreadId WakeAllConditionVariable SetUnhandledExceptionFilter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent OutputDebugStringW WideCharToMultiByte GlobalUnlock GetModuleHandleA GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetLastError CreateFileW GlobalAlloc MultiByteToWideChar CreateFileMappingA GetProcAddress VerSetConditionMask UnmapViewOfFile MapViewOfFile HeapFree HeapAlloc ReadFile GetFileSizeEx CreateFileA QueryFullProcessImageNameA GetExitCodeProcess CloseHandle Process32Next CreateToolhelp32Snapshot OpenProcess Module32First GetProcessId FreeLibrary QueryPerformanceCounter GetStdHandle SetConsoleMode Sleep Module32Next Process32First AllocConsole GetConsoleWindow SetConsoleTitleA GetConsoleMode

user32

ReleaseDC SetCursorPos ReleaseCapture IsWindowUnicode GetClientRect SetCursor SetCapture OpenClipboard CloseClipboard PeekMessageA TranslateMessage GetForegroundWindow GetCursorPos SetLayeredWindowAttributes CreateWindowExA DefWindowProcA MessageBoxA SetWindowDisplayAffinity GetSystemMetrics DestroyWindow GetWindowRect DispatchMessageA GetWindowTextA SendMessageA keybd_event SetClipboardData GetClipboardData GetKeyboardLayout PostQuitMessage RegisterClassExA UpdateWindow ShowWindow SetWindowLongA SendInput GetWindowThreadProcessId TrackMouseEvent ClientToScreen GetCapture EmptyClipboard GetDC LoadCursorA GetMessageExtraInfo GetKeyState MapVirtualKeyA GetAsyncKeyState GetKeyNameTextA FindWindowA EnumWindows IsWindow ScreenToClient

gdi32

GetDeviceCaps

shell32

SHGetFolderPathA ShellExecuteW

msvcp140

??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z _Query_perf_frequency _Mtx_lock _Query_perf_counter _Mtx_unlock ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??Bios_base@std@@QEBA_NXZ ?uncaught_exceptions@std@@YAHXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z ?_Random_device@std@@YAIXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Gettrue@_Locinfo@std@@QEBAPEBDXZ ?_Getfalse@_Locinfo@std@@QEBAPEBDXZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ??0facet@locale@std@@IEAA@_K@Z ??1facet@locale@std@@MEAA@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Id_cnt@id@locale@std@@0HA ?_Winerror_map@std@@YAHH@Z ?id@?$numpunct@D@std@@2V0locale@2@A ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Syserror_map@std@@YAPEBDH@Z _Cnd_do_broadcast_at_thread_exit _Thrd_detach _Xtime_get_ticks ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

imm32

ImmReleaseContext ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow

d3dcompiler_43

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

wininet

InternetOpenA InternetCloseHandle InternetReadFile InternetOpenUrlA

crypt32

CertFreeCertificateChain CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CryptStringToBinaryW PFXImportCertStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringW

ws2_32

getsockopt send WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect closesocket WSAGetLastError inet_pton ntohs WSASetLastError inet_ntop bind connect getpeername getsockname htons recv setsockopt socket WSAIoctl __WSAFDIsSet select accept htonl listen ioctlsocket sendto recvfrom freeaddrinfo getaddrinfo gethostname

bcrypt

BCryptGenRandom

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __current_exception wcschr __C_specific_handler __intrinsic_setjmp __std_exception_destroy __std_exception_copy strstr strchr strrchr longjmp memcpy memmove _CxxThrowException memcmp memchr __std_terminate memset

api-ms-win-crt-heap-l1-1-0

_callnewh realloc _set_new_mode calloc free malloc

api-ms-win-crt-math-l1-1-0

acosf _fdopen _fdsign powf _ldsign roundf _dsign __setusermatherr asinf logf sin nearbyint atan2f sinf cos fmodf floor pow cosf

api-ms-win-crt-stdio-l1-1-0

fflush _write fclose _read _get_stream_buffer_pointers _fseeki64 fsetpos ungetc fseek setvbuf fgetpos _fileno feof __p__commode __acrt_iob_func ftell freopen_s fgetc fputs _set_fmode __stdio_common_vfprintf _fwrite_nolock _lseeki64 fputc _wopen fgets __stdio_common_vsscanf fread _close __stdio_common_vsprintf _wfopen fwrite

api-ms-win-crt-utility-l1-1-0

qsort srand rand

api-ms-win-crt-string-l1-1-0

tolower _strdup toupper wcspbrk strncpy_s _stricmp isalnum strcpy_s strcmp strlen strncpy wcslen strncmp wcsncpy strcspn strpbrk wcsncmp strcpy strspn

api-ms-win-crt-convert-l1-1-0

strtol atoi strtoul wcstombs strtoll strtod atof strtoull

api-ms-win-crt-runtime-l1-1-0

__sys_nerr _set_app_type _cexit _get_initial_narrow_environment _invalid_parameter_noinfo_noreturn exit _initterm abort _initterm_e _exit _beginthreadex _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function __p___argc __p___argv _crt_atexit terminate _c_exit _register_thread_local_exe_atexit_callback _errno _seh_filter_exe __sys_errlist

api-ms-win-crt-time-l1-1-0

_time64 strftime _gmtime64 _localtime64_s

api-ms-win-crt-filesystem-l1-1-0

_unlink _unlock_file _wstat64 _fstat64 _lock_file

api-ms-win-crt-locale-l1-1-0

localeconv ___lc_codepage_func _configthreadlocale

advapi32

CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext SystemFunction036 CryptDestroyHash CryptImportKey CryptEncrypt CryptAcquireContextW CryptDestroyKey

Name

.text

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

779KB

Virtual Size

778KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

680KB

Virtual Size

688KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Static.exe

d3d11

d3dx11_43

kernel32

user32

gdi32

shell32

msvcp140

imm32

d3dcompiler_43

dwmapi

wininet

crypt32

ws2_32

bcrypt

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

advapi32

generic