General

Malware Config

Signatures

Files

• pack2.zip

  .zip
• 1.bat
• ScannedDocuments_8080655.lnk

  .lnk
• documents.lnk

  .lnk
• kon4an.dll

  .dll windows x64

  890931bb32885899d7c685f050eb0420

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  uxtheme

  BufferedPaintInit

  DrawThemeParentBackground

  GetThemeAppProperties

  GetThemeSysFont

  usp10

  ScriptItemizeOpenType

  ScriptApplyDigitSubstitution

  ScriptString_pLogAttr

  ScriptGetFontFeatureTags

  ole32

  CoAddRefServerProcess

  CoFreeUnusedLibraries

  StgIsStorageFile

  RegisterDragDrop

  OleGetAutoConvert

  GetHGlobalFromStream

  Exports

  Exports

  Ec7TFuPSrHV2llPY

  FtZip6wSAyF

  IKANfSICUG0mIkC1

  JabOUYy9xbWG

  KhFhMTXcAJYcnKvdQ4t

  LSsPtKTWuxVZD

  LfNpOYuwVkG

  PluginInit

  Ps5ahqwm1vSlYK2E5K44

  UBaL6nCAb0mjOZZal

  WzPBCPZub30mIcT3

  XzAdRUN8qEEwWDaN6qS

  acLH0UTV1vWXfKV

  aiXJQ1IKl1x5hqksMTW

  bDYp3Aj4oeEJea6w1

  dFpyLxfXpUJX

  fxoW9c23oWh1IPphBvaly

  htkbqZYAckAUL

  jQPCfsCELxmGQl8euC

  lp3ic5suXyOfsw89X

  u3oLUyU5NlysD

  Sections

  .text

  Size: 48KB - Virtual size: 47KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 329KB - Virtual size: 328KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• local.dll

  .dll windows x86

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Sections

  CODE

  Size: 378KB - Virtual size: 378KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  DATA

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  BSS

  Size: - Virtual size: 3KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 28KB - Virtual size: 27KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 421KB - Virtual size: 421KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ