file | Triage

Resubmissions

07/03/2022, 21:46 UTC

220307-1my3aagbh2 10

28/02/2022, 09:51 UTC

220228-lvldtsdhg4 10

24/02/2022, 19:51 UTC

220224-yk4hwaehap 1

Sharing

Copy URL

Twitter E-mail

General

Target

file
Size

619KB
MD5

7631d7abc1bd5ad9777479b7cd36bbfb
SHA1

c8fc486efa31b5967021ba4806c4f5f5801fccb9
SHA256

f5628f5e31a100bd7f64c47908035d5b9b35f7f375e2a13d25b2370b8500b9ca
SHA512

66deea8b7b4f4335a71fbe2e8c997e938af2a0711b842d1d6ab012d79873709575715e2cecc1ec90127361920dfd027ceba2b8ebd948abe73bac08cde54d8661
SSDEEP

12288:EQHrRbsTP9qoTVIj8xjmHFlmxQILADKtCexMExW+X6JdPE42eBKt45iWS2Bx:E+9bEpVs8EHHj1D4HxMEU+aE/rsx

Score

N/A

Malware Config

Signatures

Files

file
.zip
core.bat
license.dat
strike64.tmp
.dll windows x64

f93a381dc1c2344c783ae5f713d1465d

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemDefaultUILanguage
GetEnvironmentStringsW
TlsAlloc
GetSystemDefaultLangID
GetThreadErrorMode
AreFileApisANSI
GetCurrentProcess
UnregisterApplicationRestart
GetThreadLocale
GetUserDefaultLangID
GetCommandLineW
GetUserDefaultUILanguage
GetLargePageMinimum
GetLastError
GetACP
GetTickCount
GetCurrentThread
GetErrorMode
GetCurrentProcessorNumber
GetThreadUILanguage
GetCurrentThreadId
SetFileApisToOEM
GetCommandLineA
VirtualAlloc
GetOEMCP
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
LoadResource
SizeofResource
FindResourceW
GetLogicalDrives
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
lstrcmpiW
FreeLibrary
WriteConsoleW
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetProcessHeap
UnregisterApplicationRecoveryCallback
CloseHandle
ReadFile
FindClose
GetTickCount64
GetModuleHandleW
LoadLibraryA
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetCPInfo
GetStringTypeW
LCMapStringEx
EncodePointer
LeaveCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EnterCriticalSection
RtlUnwind

user32

GetCursor
GetDialogBaseUnits
GetMessageExtraInfo
GetForegroundWindow
EmptyClipboard
CreateMenu
GetClipboardViewer
CloseClipboard
DestroyCaret
InSendMessage
GetCapture
GetShellWindow
GetClipboardSequenceNumber
CountClipboardFormats
GetDesktopWindow
GetFocus
IsProcessDPIAware
GetMenuCheckMarkDimensions
GetMessageTime
AnyPopup
SetCursor
LoadCursorW
CharNextW
SetProcessDPIAware
GetOpenClipboardWindow
GetActiveWindow

gdi32

GdiFlush

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW

ole32

CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
OleUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize

oleaut32

VarUI4FromStr

winmm

waveInOpen

wininet

InternetQueryDataAvailable

Exports

Exports

DllMain
amyqnmkldm
awafrfa
biwiijoyyaevz
eaucmqjjaremfo
fonkoslcaxqjt
fpoakmyaqbf
hqouzqrghwmo
irepbwegsotmvl
jbrmifhoucpb
ligioyxsznj
llmjjmmhexmm
lmlecaxxfqgea
mijnfevkyg
mknahphwddlca
nmphvgcwuardil
nxnzeqqlivkio
vzzikuutxcwc
xoregdelcvhdpca
xtatzoeymdg
ylagrnkivzefbvil

Sections

.text
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f93a381dc1c2344c783ae5f713d1465d

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

winmm

wininet

Exports

Exports

Sections

.text Size: 271KB - Virtual size: 271KB

.rdata Size: 288KB - Virtual size: 287KB

.data Size: 18KB - Virtual size: 24KB

.pdata Size: 11KB - Virtual size: 11KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 2KB

We care about your privacy.

.text
Size: 271KB - Virtual size: 271KB

.rdata
Size: 288KB - Virtual size: 287KB

.data
Size: 18KB - Virtual size: 24KB

.pdata
Size: 11KB - Virtual size: 11KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 2KB