weyuhiadsjmkajui
Static task
static1
Behavioral task
behavioral1
Sample
cmd.bat
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
cmd.bat
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
labor-.dll
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
labor-.dll
Resource
win10v2004-20220414-en
General
-
Target
core.zip
-
Size
799KB
-
MD5
b54f9a14ad80280e07e360f9de0c90cd
-
SHA1
cc4a52a18968e9240755465a8aebe01642d845eb
-
SHA256
b02d8fe1588d2cb30bb4e45a75fb5b24385185d066f013e53ee546a882c16c0e
-
SHA512
cf9c295798d1b7fafdd4ac5c77938a5ea6ba98607281c140f57a5d98c271ecd40d3f492ca54370cdf2c1bd4278be945f44920d18092cbe88bb433bfe38d54bc2
-
SSDEEP
12288:nieQ2dMlUsi35TDhjDQX2Rwak7cMQpsVU7mhfII1hbOO90/BTu7ZmD3lLr2qI8G8:9vdMdiJTh8GtkcMimh5B90JTqSr2q9x
Malware Config
Signatures
Files
-
core.zip.zip
-
cmd.bat
-
labor-.tmp.dll windows x64
c5e44af7585fc2de3bac4cb691986a5e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
imm32
ImmGetCompositionStringA
ImmGetCandidateListW
ImmGetCompositionWindow
ImmGetProperty
msvfw32
ICInfo
ICInstall
ICDraw
ICLocate
ICSeqCompressFrameEnd
DrawDibOpen
DrawDibRealize
DrawDibStart
DrawDibBegin
GetOpenFileNamePreviewA
rasapi32
RasHangUpA
RasCreatePhonebookEntryW
RasGetEntryDialParamsA
RasDeleteEntryA
RasConnectionNotificationW
RasGetEapUserDataA
RasSetCustomAuthDataA
RasSetCustomAuthDataW
ole32
HICON_UserMarshal
GetHGlobalFromILockBytes
CoGetInstanceFromIStorage
DcomChannelSetHResult
CoDosDateTimeToFileTime
CoRegisterMessageFilter
StgOpenAsyncDocfileOnIFillLockBytes
BindMoniker
HACCEL_UserFree
Exports
Exports
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
license.dat