Overview
overview
1Static
static
0c435aadaa...38.zip
windows7-x64
10c435aadaa...38.zip
windows10-2004-x64
1Setup_64_11/Setup.zip
windows7-x64
1Setup_64_11/Setup.zip
windows10-2004-x64
1Repack.dll
windows7-x64
1Repack.dll
windows10-2004-x64
1Setup_64_11/z.txt
windows7-x64
1Setup_64_11/z.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
0c435aadaa3c42a71ad8ff80781def4c8ce085f960d75f15b6fee8df78b2ac38.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0c435aadaa3c42a71ad8ff80781def4c8ce085f960d75f15b6fee8df78b2ac38.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Setup_64_11/Setup.zip
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Setup_64_11/Setup.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Repack.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
Repack.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
Setup_64_11/z.txt
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Setup_64_11/z.txt
Resource
win10v2004-20220812-en
Errors
General
-
Target
0c435aadaa3c42a71ad8ff80781def4c8ce085f960d75f15b6fee8df78b2ac38
-
Size
975KB
-
MD5
7b5b8496d825d8bb9f17796135c83c15
-
SHA1
04a37c2182fe3a15eec2153d56a37c4f66b7ab0b
-
SHA256
0c435aadaa3c42a71ad8ff80781def4c8ce085f960d75f15b6fee8df78b2ac38
-
SHA512
5285f6d1ab8c4c6b089dda8c62c080ceb86a98167ff1c600318d55c74b1d3e8da329d052f583a00dc0307f65e049715111896c92fdb49bbb074c3f83bbe071ba
-
SSDEEP
24576:cXaPu3ntWyBEA2Dyp6RfdD/JyPVEXru+um0PRNM0Y37ho3Y:cXamzOByp6Rkgru+umGRNMX7h5
Malware Config
Signatures
Files
-
0c435aadaa3c42a71ad8ff80781def4c8ce085f960d75f15b6fee8df78b2ac38.zip
-
Setup_64_11/Setup.zip.zip
-
Repack.cpl.dll windows x86
6b8f0b0723feceeda32d5279fb79972d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
FindExecutableW
ExtractIconExW
clusapi
GetClusterResourceNetworkName
ws2_32
shutdown
secur32
DecryptMessage
GetUserNameExA
kernel32
FindFirstFileW
GetSystemPowerStatus
DeactivateActCtx
lstrcmpA
EnumSystemCodePagesA
DebugActiveProcess
GetComputerNameExW
GlobalGetAtomNameA
FindActCtxSectionStringW
EnumSystemGeoID
FlushInstructionCache
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
lstrcmpW
WriteProfileStringW
ExitProcess
GetTempPathW
LoadLibraryA
OutputDebugStringA
GetBinaryTypeA
GetModuleFileNameA
DeviceIoControl
FreeLibrary
GlobalFlags
FindResourceW
WritePrivateProfileStructW
LocalFileTimeToFileTime
GetCPInfo
DefineDosDeviceW
GlobalAlloc
GetThreadLocale
GetUserDefaultLCID
FindResourceExW
GetCommandLineW
user32
GetSysColor
GetPropA
GetPriorityClipboardFormat
GetDlgItem
GetWindowLongW
EqualRect
GetClipboardFormatNameA
LoadAcceleratorsA
IsWindowVisible
GetMenuItemID
GetCursorPos
GetDesktopWindow
DrawStateA
GetThreadDesktop
GetSystemMenu
GetClassWord
GetCursor
GetMessageW
FindWindowExA
LockWindowUpdate
wininet
FindFirstUrlCacheEntryExW
gdi32
ExtSelectClipRgn
DeleteMetaFile
GetObjectType
GetPath
ModifyWorldTransform
GetCharacterPlacementW
DeleteColorSpace
GetRandomRgn
GetOutlineTextMetricsW
GetPaletteEntries
DeleteEnhMetaFile
urlmon
FindMimeFromData
ole32
MkParseDisplayName
mscms
GetColorDirectoryW
version
GetFileVersionInfoA
msvcrt
fgetwc
toupper
system
advapi32
LogonUserW
GetCurrentHwProfileW
EqualSid
LookupPrivilegeNameW
GetSecurityDescriptorControl
InitializeSecurityDescriptor
EqualDomainSid
Sections
.text Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 920KB - Virtual size: 918KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.x Size: 680.1MB - Virtual size: 680.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
Setup_64_11/z.txt