a.7z
- SHA256 be443555adde2329d2e6392b6549c3856fa0ab250f3e56798e91044c1cd95751
Static task
static1
Behavioral task
behavioral1
Sample
a/Files.lnk
Resource
win7-20220901-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
a/Files.lnk
Resource
win10v2004-20220812-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
a/seagem.bat
Resource
win7-20220812-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
a/seagem.bat
Resource
win10v2004-20220812-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral5
Sample
a/unedifying.dll
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
a/unedifying.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target a.7z
- Size 129KB
- Sample221206-ng89vach59
- SHA256 be443555adde2329d2e6392b6549c3856fa0ab250f3e56798e91044c1cd95751
- MD5 c42ec50c46ed8331eeb718b2934dae80
- SHA1 798b0af57c4ea60663132559d707a1e99fccbfda
- SHA512 074ce1fbb34da5cb0b8a50bda79b5e1e96523874174f6f355386597c8685a811ce6dee758846d3e12e0a8b93115840db12acb0327d08bf6566809b609ae0feea
- SSDEEP 3072:9N7zhJcTQDbXuazGWXwCMG5/mHzq3Zp/dC+DyaWhA5vH8VIyQd3YHvg:H/h2TGXucGCwCMG5eHcZvCsyNhQvcKyI
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
a.7z.7z 129KB
-
a/Files.lnk.lnk 1KB
-
a/seagem.bat1KB
-
a/unedifying.dll.dll 269KB
a/Files.lnk
- SHA256 5711298ce147def8b20fbaf92017f77cd015c66e8ed71770d3796354ddc3ad6e
- MD5 5120b029963b569d6eac783f0894c683
- SHA1 d6947aa53a3c7c0c9cbe2709385def511169ff27
- SHA512 84cef12c13e32bef551092a4c22ab7327758a65b93455853b1cdc6b67d0374e704d58a1e94b75f21ee37ce94140fe86b288de06a1a23a5e165f347e4124cbea2
- MD5 SHA1 SHA512
a/seagem.bat
- SHA256 1195439fcd3deeff79ee8e3bc4d50e5c8015082e307182da2b252cc0ebf4f8e5
- MD5 54f37ed83c9c52fc14cfb808b56f558e
- SHA1 576ac72dadf9e5b2b3d742bcf1ccda7002d76b87
- SHA512 7834ee399f4a0555606bee8ea54629c44a973f01d495572221e2b6003de8103ca83c177daf5003160162274f8dfa7232b946a16ac944e344f3d7b7bd589ffefe
- MD5 SHA1 SHA512
a/unedifying.dll
- IMPHASH ef65ccf1cd38902572a6502b6961bef7
- SHA256 c7d63b44ed478fe48468ddee84beb324712b22602b8c8a1ee2de75445f18528e
- MD5 012da0b3ac0042942cd3b37915e799ba
- SHA1 848ec6dadfd86129908bf5cf51e34fb1d0e3ca62
- SHA512 bc5f4f3940035a71d810692c65dbec81c3344f6a454c4b6cf666286edbeda737fdfdb962e7009d32a37a02476424c98605b7a054b312ca9f0b47168e8bc0948c
- SSDEEP 6144:mTHJ5BU2WigC+/NZy40onBV14xjN8IcOzECLZ:8DB0igC+/NHBV1SjaCd
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
89276
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
kernel32
WaitForMultipleObjects
GetExitCodeThread
LocalAlloc
FileTimeToSystemTime
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
GetTempPathW
ResetEvent
GetTickCount
FreeLibrary
LoadLibraryW
IsBadReadPtr
GetStdHandle
SetEnvironmentVariableW
CloseHandle
GetLastError
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
SetStdHandle
GetStringTypeW
Sleep
GetProcessHeap
LCMapStringW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFileType
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
SetEvent
MultiByteToWideChar
lstrlenA
lstrcpynA
lstrcmpW
Thread32Next
Thread32First
CreateToolhelp32Snapshot
WriteConsoleInputW
ReadConsoleInputW
WideCharToMultiByte
lstrlenW
lstrcpyW
lstrcpynW
lstrcmpiW
LocalFree
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
UnmapViewOfFile
SetFilePointerEx
OpenFileMappingW
CreateFileMappingW
VirtualQuery
VirtualProtect
GetCurrentThreadId
MapViewOfFile
InitializeCriticalSectionAndSpinCount
EncodePointer
GetCurrentProcessId
WaitForSingleObject
InterlockedFlushSList
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
DebugBreak
GetEnvironmentVariableW
ReadFile
WriteFile
IsDebuggerPresent
SetLastError
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
Process32FirstW
Process32NextW
OpenThread
RaiseException
CreateThread
TerminateThread
ResumeThread
VerSetConditionMask
GetFileInformationByHandle
VerifyVersionInfoW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
FreeEnvironmentStringsW
ExpandEnvironmentStringsW
GetConsoleScreenBufferInfo
ReadConsoleOutputW
GetCurrentProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
user32
GetIconInfo
DrawIconEx
DestroyIcon
LoadIconW
ReleaseDC
GetDC
LoadCursorW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
FillRect
InvalidateRect
EndPaint
BeginPaint
DrawTextW
ShowWindowAsync
DestroyWindow
IsWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
PostThreadMessageW
PostMessageW
DispatchMessageW
GetMessageW
RegisterWindowMessageW
wsprintfW
GetWindowThreadProcessId
GetClassNameW
IntersectRect
ChildWindowFromPointEx
WindowFromPoint
MapWindowPoints
MessageBoxW
GetClientRect
ShowWindow
MapVirtualKeyW
GetKeyState
IsWindowVisible
gdi32
GdiFlush
GetObjectW
CreateDIBSection
GdiAlphaBlend
SetStretchBltMode
StretchBlt
MoveToEx
SetTextColor
SetBkColor
SelectObject
Rectangle
LineTo
GetStockObject
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
shell32
SHGetFileInfoW
ole32
CoUninitialize
CoInitializeEx
hxitFAR
hxitFARW
hetGlobalInfoW
hetMinFarVersion
hetMinFarVersionW
hetPluginInfo
hetPluginInfoW
hpenPlugin
hpenPluginW
hpenW
hrocessSynchroEventW
hetStartupInfo
init
Name
.text
Size
164KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ