weyuhiadsjmkajui
Static task
static1
Behavioral task
behavioral1
Sample
reconstructed_core/2022-06-04/core/cmd.bat
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
reconstructed_core/2022-06-04/core/cmd.bat
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
reconstructed_core/2022-06-04/core/labor-.dll
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
reconstructed_core/2022-06-04/core/labor-.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
reconstructed_core/2022-06-04/core/license.dat
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
reconstructed_core/2022-06-04/core/license.dat
Resource
win10v2004-20220414-en
General
-
Target
core.zip
-
Size
799KB
-
MD5
aa68ee8783a0db25efdf7b01c8e4b754
-
SHA1
826fd413bcb6899f378c99bbd901f727e8fbc27a
-
SHA256
c6021e59df4ef15a6590e4cc4b5d2a75c7c881397f154163849f969ebfbf8933
-
SHA512
8eff2d2c4efab1fc946a7520fc5695d46640fe33ad1209138d89ca4b5c58d099808f04b2c25bc988c007267c6cb893c06fdf3c7328b27a1502d25f1eda40fd99
-
SSDEEP
12288:nszxeQ2dMlUsi35TDhjDQX2Rwak7cMQpsVU7mhfIICwhbOO90/BTu7ZmD3lLr2qd:TvdMdiJTh8GtkcMimhpB90JTqSr2q9f
Malware Config
Signatures
Files
-
core.zip.zip
-
reconstructed_core/2022-06-04/core/cmd.bat
-
reconstructed_core/2022-06-04/core/labor-.tmp.dll windows x64
c5e44af7585fc2de3bac4cb691986a5e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
imm32
ImmGetCompositionStringA
ImmGetCandidateListW
ImmGetCompositionWindow
ImmGetProperty
msvfw32
ICInfo
ICInstall
ICDraw
ICLocate
ICSeqCompressFrameEnd
DrawDibOpen
DrawDibRealize
DrawDibStart
DrawDibBegin
GetOpenFileNamePreviewA
rasapi32
RasHangUpA
RasCreatePhonebookEntryW
RasGetEntryDialParamsA
RasDeleteEntryA
RasConnectionNotificationW
RasGetEapUserDataA
RasSetCustomAuthDataA
RasSetCustomAuthDataW
ole32
HICON_UserMarshal
GetHGlobalFromILockBytes
CoGetInstanceFromIStorage
DcomChannelSetHResult
CoDosDateTimeToFileTime
CoRegisterMessageFilter
StgOpenAsyncDocfileOnIFillLockBytes
BindMoniker
HACCEL_UserFree
Exports
Exports
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
reconstructed_core/2022-06-04/core/license.dat