file
- SHA256 f5628f5e31a100bd7f64c47908035d5b9b35f7f375e2a13d25b2370b8500b9ca
Static task
static1
Behavioral task
behavioral1
Sample
core.bat
Resource
win7-20220223-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
core.bat
Resource
win10v2004-en-20220112
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
strike64.dll
Resource
win7-20220223-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
strike64.dll
Resource
win10v2004-en-20220113
windows10-2004_x64
0 signatures
0 seconds
General
- Target file
- Size 619KB
- Sample220224-yk4hwaehap
- SHA256 f5628f5e31a100bd7f64c47908035d5b9b35f7f375e2a13d25b2370b8500b9ca
- MD5 7631d7abc1bd5ad9777479b7cd36bbfb
- SHA1 c8fc486efa31b5967021ba4806c4f5f5801fccb9
- SHA512 66deea8b7b4f4335a71fbe2e8c997e938af2a0711b842d1d6ab012d79873709575715e2cecc1ec90127361920dfd027ceba2b8ebd948abe73bac08cde54d8661
- SSDEEP 12288:EQHrRbsTP9qoTVIj8xjmHFlmxQILADKtCexMExW+X6JdPE42eBKt45iWS2Bx:E+9bEpVs8EHHj1D4HxMEU+aE/rsx
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
file.zip 619KB
-
core.bat184B
-
license.dat333KB
-
strike64.tmp.dll 600KB
core.bat
- SHA256 5be1931accf2a90e273312b779a873e847ad965e6e11c04e9b83603d4e6e7491
- MD5 59aa96fcaa1a3b7331758f7a7ae1f343
- SHA1 198ffe332e90207fdb7b97da04770b001c0c5cbf
- SHA512 c67253d6d602e150e85e121b2d8d9dedfa72c3ea1950d6a50a8e52a201f06ff9e701acee04b49e682158fb9860c77fd7ad117e20d9c4c8b03938e53e7d6e99c7
- SSDEEP 3:lNeKDDcefoKwLVERhkiBVER5SL4A6moK2MLRLuVvgLWOERyeSL4A6moK2MLRLuVE:XpddwopPkFmdrlmvg5JkFmdrlmpo53
- MD5 SHA1 SHA512 SSDEEP
license.dat
- SHA256 96e657e1face63798a43e6210dba8d8c2f618d0be1230b95ab59d8bd23fc165a
- MD5 7eb64145636d2e8343d9077f15c11022
- SHA1 c0b221ca05431092bc1c789a33d199124c8fec1c
- SHA512 53171e09d3d146fe02e481944e1c5481f1bb48eaf66259d1b8bbbbf7a83efc4a73fc28089c7e1eacf221620cdff6ea7f1049c17720181fde88b4bdc27c1ea9b6
- SSDEEP 6144:EpQVFSaPRb80liV5IpoTVIf8xsubgI0U5wldSEKONiErESixF0BWe5:qQvFRb8FV58oTVIf8xNwHbdixFI5
- MD5 SHA1 SHA512 SSDEEP
strike64.tmp
- IMPHASH f93a381dc1c2344c783ae5f713d1465d
- SHA256 3055bfdc5fee78ad2b92fc4b1a35a4632a1f03152fc7e835a7f21d41e44aeb26
- MD5 b3afc3fcf6756131e897a5234707e422
- SHA1 82684fd3a133ad4be9abcd8f95e56eea403e4706
- SHA512 a860a193ee62045fbb0da4ea6735913cee6a9786008a487a2f8755a3d1dceea73b74da8301af5a4e1ebec2ae88d581e7be07f620cf90461047eda790673b9b88
- SSDEEP 6144:+yxyHmIIaT0vLXEn7zyMgRakDlLgx4/IohjpfVUcl1zLbyw1IwMg69UJo0u3R58:bwINsPbkDux4QozaclQw1IwwUi7
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
147028
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetSystemDefaultUILanguage
GetEnvironmentStringsW
TlsAlloc
GetSystemDefaultLangID
GetThreadErrorMode
AreFileApisANSI
GetCurrentProcess
UnregisterApplicationRestart
GetThreadLocale
GetUserDefaultLangID
GetCommandLineW
GetUserDefaultUILanguage
GetLargePageMinimum
GetLastError
GetACP
GetTickCount
GetCurrentThread
GetErrorMode
GetCurrentProcessorNumber
GetThreadUILanguage
GetCurrentThreadId
SetFileApisToOEM
GetCommandLineA
VirtualAlloc
GetOEMCP
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
LoadResource
SizeofResource
FindResourceW
GetLogicalDrives
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
lstrcmpiW
FreeLibrary
WriteConsoleW
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetProcessHeap
UnregisterApplicationRecoveryCallback
CloseHandle
ReadFile
FindClose
GetTickCount64
GetModuleHandleW
LoadLibraryA
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetCPInfo
GetStringTypeW
LCMapStringEx
EncodePointer
LeaveCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EnterCriticalSection
RtlUnwind
user32
GetCursor
GetDialogBaseUnits
GetMessageExtraInfo
GetForegroundWindow
EmptyClipboard
CreateMenu
GetClipboardViewer
CloseClipboard
DestroyCaret
InSendMessage
GetCapture
GetShellWindow
GetClipboardSequenceNumber
CountClipboardFormats
GetDesktopWindow
GetFocus
IsProcessDPIAware
GetMenuCheckMarkDimensions
GetMessageTime
AnyPopup
SetCursor
LoadCursorW
CharNextW
SetProcessDPIAware
GetOpenClipboardWindow
GetActiveWindow
gdi32
GdiFlush
advapi32
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
ole32
CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
OleUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
oleaut32
VarUI4FromStr
winmm
waveInOpen
wininet
InternetQueryDataAvailable
DllMain
amyqnmkldm
awafrfa
biwiijoyyaevz
eaucmqjjaremfo
fonkoslcaxqjt
fpoakmyaqbf
hqouzqrghwmo
irepbwegsotmvl
jbrmifhoucpb
ligioyxsznj
llmjjmmhexmm
lmlecaxxfqgea
mijnfevkyg
mknahphwddlca
nmphvgcwuardil
nxnzeqqlivkio
vzzikuutxcwc
xoregdelcvhdpca
xtatzoeymdg
ylagrnkivzefbvil
Name
.text
Size
271KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
288KB
Virtual Size
287KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
18KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ