Static task
static1
Behavioral task
behavioral1
Sample
ok.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
ok.exe
Resource
win10v2004-20220414-en
General
-
Target
40014d7acbc86a699a7015c9b890ea08a564b045efc0d35ddb9132f548b9f84d
-
Size
146KB
-
MD5
6df4264b77cf2990590dd067e03b2f1e
-
SHA1
1c4c7ae5dbb0ee2e764f7ea828d37eb92631cd77
-
SHA256
40014d7acbc86a699a7015c9b890ea08a564b045efc0d35ddb9132f548b9f84d
-
SHA512
9a551572123bf5d81161acd055d83d733dd18b5c4d3c0362edac0135080e12fd1eb51d64387f33a2e94cb6bbc6aebbd967f3df30bea81a06669cdc160aaf12fc
-
SSDEEP
3072:3xdhIzCq8YZ3J8b6dnONBjzRfltuZo/tdsdXegjR:BvIzCmJ8b6dnCRrdaX
Malware Config
Signatures
Files
-
40014d7acbc86a699a7015c9b890ea08a564b045efc0d35ddb9132f548b9f84d.zip
Password: infected
-
ok.exe.exe windows x86
dfacca398dba417309cc445aa93078ed
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileW
GetPrivateProfileStringA
LocalAlloc
ReplaceFileA
QueryPerformanceCounter
LoadResource
GetCommProperties
GetCPInfoExW
LocalReAlloc
GetPrivateProfileStructW
QueryDepthSList
WaitForSingleObjectEx
lstrlenW
GetCPInfoExA
WriteConsoleW
CloseHandle
HeapSize
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapAlloc
RaiseException
GetModuleHandleW
FoldStringW
GetProcAddress
ScrollConsoleScreenBufferW
CreateJobSet
GetTempFileNameW
SetFilePointer
SetStdHandle
IsProcessorFeaturePresent
GetStringTypeW
LCMapStringW
LoadLibraryW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
DecodePointer
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapFree
RtlUnwind
MultiByteToWideChar
CreateFileW
user32
UnpackDDElParam
CreateDialogParamA
GetWindowTextLengthW
SetWindowContextHelpId
DefDlgProcW
EnumDisplaySettingsA
GetIconInfo
GetWindowRgn
ExcludeUpdateRgn
SetPropW
IsCharAlphaNumericW
GetMenuInfo
LoadIconA
AdjustWindowRectEx
gdi32
CreateFontA
CopyEnhMetaFileW
EnumEnhMetaFile
CombineTransform
EnumFontFamiliesW
GetCurrentPositionEx
OffsetViewportOrgEx
ole32
CoGetClassObject
CoIsHandlerConnected
OleRegGetUserType
OleFlushClipboard
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ