file
- SHA256 8b435260be4ed4a5286c36ac8b5296d9b3b637ced5a1ad3e2704ea2fff5b20ed
Static task
static1
Behavioral task
behavioral1
Sample
core.bat
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
core.bat
Resource
win10v2004-en-20220112
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
oak_32.dll
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
oak_32.dll
Resource
win10v2004-en-20220112
windows10-2004_x64
0 signatures
0 seconds
General
- Target file
- Size 680KB
- Sample220217-szdm4sbdg3
- SHA256 8b435260be4ed4a5286c36ac8b5296d9b3b637ced5a1ad3e2704ea2fff5b20ed
- MD5 96617ff25f134f882a34da9ceae7f68d
- SHA1 2d4df158d1d740209d6620ef409fc737c725a908
- SHA512 8f0fc40355742c0b54a8069f708843e841c984bc03f1217d29be55a5333dfeffef7bb6af62575fe8a430a1403806e02e199e8d3dab41eac533aa925595c11bbd
- MD5 SHA1 SHA512
Score
N/A
Malware Config
Signatures
File Explorer
-
file.zip 680KB
-
core.bat180B
-
license.dat333KB
-
oak_32.tmp.dll 533KB
core.bat
- SHA256 e3b8505a1fc778f8cb1679695e0aba51ea3feafb04901822df1bab5685178876
- MD5 5abd34de9a35879df648b0fceb40e95d
- SHA1 b57efae330d206a933d0e92699536056ee84d7df
- SHA512 72db89236aae1fd29c17b6a8916eb9c4855f5ed33daa01268a4613e73b0361f51975531f46c55e93ebd0ac65d0bcd3ba1b336b920ce7573824b116533cd0e00a
- MD5 SHA1 SHA512
license.dat
- SHA256 96e657e1face63798a43e6210dba8d8c2f618d0be1230b95ab59d8bd23fc165a
- MD5 7eb64145636d2e8343d9077f15c11022
- SHA1 c0b221ca05431092bc1c789a33d199124c8fec1c
- SHA512 53171e09d3d146fe02e481944e1c5481f1bb48eaf66259d1b8bbbbf7a83efc4a73fc28089c7e1eacf221620cdff6ea7f1049c17720181fde88b4bdc27c1ea9b6
- MD5 SHA1 SHA512
oak_32.tmp
- IMPHASH a68206bbdff85ce4641c7fae6b0402d9
- SHA256 c558309a80b460844bc23a72c49d524d299c11fc058b2b5ea150790022144ac6
- MD5 3a154ce57e032a255a9936b92aaf996f
- SHA1 512e5af1b4b98c7d5a7c8d25341f31749f331273
- SHA512 e0226761df28bba51b86a9d8aac3359eba922c86b42ed3db5541fffa05e607932b39579b7fd11202ffa1ef750f9695bb696f76e9275c4a483fb049c33aa6ca5f
- MD5 SHA1 SHA512
Minor OS version
Major OS version
Entry point
125188
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetThreadUILanguage
GetCurrentThread
GetThreadLocale
SetFileApisToOEM
GetTickCount
IsDebuggerPresent
GetACP
GetLastError
SwitchToThread
GetCurrentThreadId
UnregisterApplicationRestart
FlushProcessWriteBuffers
GetLargePageMinimum
GetSystemDefaultLangID
GetUserDefaultLangID
GetErrorMode
GetCurrentProcessorNumber
TlsAlloc
GetThreadErrorMode
GetCommandLineW
IsSystemResumeAutomatic
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
LoadResource
SizeofResource
FindResourceW
GetCommandLineA
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
lstrcmpiW
FreeLibrary
WriteConsoleW
CreateFileW
ReadConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
GetProcessHeap
GetEnvironmentStringsW
CloseHandle
ReadFile
FindClose
FindNextFileA
GetTickCount64
GetModuleHandleW
LoadLibraryA
FlushFileBuffers
HeapSize
GetFileType
GetStdHandle
HeapFree
HeapReAlloc
HeapAlloc
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
RtlUnwindEx
RtlPcToFileHeader
OutputDebugStringW
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
TlsFree
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
user32
GetOpenClipboardWindow
GetProcessWindowStation
GetClipboardSequenceNumber
GetForegroundWindow
DestroyCaret
EmptyClipboard
GetMessageExtraInfo
InSendMessage
CreateMenu
IsWow64Message
IsProcessDPIAware
GetFocus
GetClipboardViewer
CountClipboardFormats
AnyPopup
CharNextW
GetActiveWindow
GetMessageTime
GetDialogBaseUnits
GetCapture
advapi32
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
shell32
InitNetworkAddressControl
ole32
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoFreeUnusedLibraries
OleUninitialize
oleaut32
VarUI4FromStr
DllMain
adlxmkseyreyfga
cmwhgxmeswqfjfgr
csyflhvhidka
earwsnpetgljkyui
egokgisvtwc
fdrrjoc
fvuwyxgr
gmahhfr
kcunqmarhlqbgafw
ljurtljkcuo
madtfaao
oyubldzec
rbsfddazv
rdyvwifg
rxwyamlqgoxew
tpnmrlygt
vdywufhhpzwoceof
vtducxzi
vtzbhhdorngaurvvi
wljwgrfkfnncj
ybhfjekohhph
ytuzojtaxb
yyaikrauwftjpe
Name
.text
Size
239KB
Virtual Size
238KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
200KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
1024B
Virtual Size
788B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
73KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ