Static task
static1
Behavioral task
behavioral1
Sample
Adobe Premiere Pro.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Adobe Premiere Pro.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
bin.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
bin.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
file.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
file.dll
Resource
win10v2004-20220901-en
General
-
Target
Adobe Premiere Pro.rar
-
Size
14.3MB
-
MD5
e076cf949ea18d6d274f9200ab920930
-
SHA1
b5fa92ea8fdbd14851ed43b6538e9a8234065631
-
SHA256
c5ef4ee229ae2e2d4d730e3f5788bca358064db580b1b1bf3a4e1a2a47e175df
-
SHA512
7dddca6b418f289ef3724665902210b8e5f93a796299a3a1dce2992e6cd4c138dd1cf39de297e7968c518aec8d5a96a32ff2be4a69be4480c11957bb438c26af
-
SSDEEP
393216:IzLls5o9QlIA8JZPzgbppagkGvNTW6cu4JvLMxAFc:IzLlcbmA8JZMvISJwLJw3
Malware Config
Signatures
Files
-
Adobe Premiere Pro.rar.rar
Password: 1515
-
Additional File/el.pak
-
Additional File/en-GB.pak
-
Additional File/en-US.pak
-
Additional File/es-419.pak
-
Additional File/es.pak
-
Additional File/et.pak
-
Additional File/fa.pak
-
Additional File/fi.pak
-
Additional File/fil.pak
-
Additional File/fr.pak
-
Additional File/gu.pak
-
Additional File/he.pak
-
Additional File/hi.pak
-
Additional File/hr.pak
-
Additional File/hu.pak
-
Additional File/id.pak
-
Additional File/it.pak
-
Additional File/ja.pak
-
Additional File/kn.pak
-
Additional File/ko.pak
-
Additional File/lt.pak
-
Additional File/lv.pak
-
Additional File/ml.pak
-
Additional File/mr.pak
-
Additional File/ms.pak
-
Additional File/nb.pak
-
Additional File/nl.pak
-
Additional File/pl.pak
-
Additional File/pt-BR.pak
-
Additional File/pt-PT.pak
-
Additional File/ro.pak
-
Additional File/ru.pak
-
Additional File/sk.pak
-
Additional File/sl.pak
-
Additional File/sr.pak
-
Additional File/sv.pak
-
Additional File/sw.pak
-
Additional File/ta.pak
-
Additional File/te.pak
-
Additional File/th.pak
-
Additional File/tr.pak
-
Additional File/uk.pak
-
Additional File/vi.pak
-
Additional File/zh-CN.pak
-
Additional File/zh-TW.pak
-
Adobe Premiere Pro.exe.exe windows x86
Password: 1515
fa6fb8eea4f8766581f07c1a7a85e418
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TrackPopupMenu
ClientToScreen
DestroyMenu
GetCursorPos
AppendMenuA
SendDlgItemMessageA
GetDlgItem
SendMessageA
GetDlgItemTextA
wsprintfA
MessageBoxA
LoadCursorA
GetActiveWindow
CheckDlgButton
SetWindowTextA
IsDlgButtonChecked
SetWindowLongA
CallWindowProcA
GetClassInfoA
CloseClipboard
GetClipboardData
EnumClipboardFormats
SetDlgItemTextA
EndDialog
RegisterClassA
DefDlgProcA
SetActiveWindow
SetMenuItemInfoA
CheckMenuItem
GetMenu
InsertMenuItemA
SetWindowPlacement
SetTimer
GetSystemMenu
MoveWindow
GetClientRect
PostQuitMessage
DestroyWindow
DestroyIcon
KillTimer
GetSysColor
CheckMenuRadioItem
EnableMenuItem
CharLowerBuffA
GetWindowPlacement
SetDlgItemInt
GetSubMenu
IsMenu
GetWindowRect
CreateDialogParamA
DestroyCursor
PostMessageA
ChildWindowFromPoint
InvalidateRect
RemoveMenu
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
IsDialogMessageA
OpenClipboard
CharUpperA
SetFocus
SetClipboardData
EmptyClipboard
LoadIconA
TranslateMessage
DispatchMessageA
DestroyAcceleratorTable
DialogBoxParamA
GetSysColorBrush
SetCursor
UnregisterClassA
CheckRadioButton
IsWindow
GetSystemMetrics
EnableWindow
GetWindowTextA
RedrawWindow
FindWindowA
SetWindowPos
wvsprintfA
CreatePopupMenu
GetWindowLongA
kernel32
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
Sleep
GetModuleHandleW
SetUnhandledExceptionFilter
GetCommandLineA
FreeConsole
GetProcAddress
GetModuleHandleA
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 302KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Locales/am.pak
-
Locales/ar.pak
-
Locales/bg.pak
-
Locales/bn.pak
-
Locales/ca.pak
-
Locales/cs.pak
-
Locales/da.pak
-
Locales/de.pak
-
Locales/el.pak
-
Locales/en-GB.pak
-
Locales/en-US.pak
-
Locales/es-419.pak
-
Locales/es.pak
-
Locales/et.pak
-
Locales/fa.pak
-
Locales/fi.pak
-
Locales/fil.pak
-
Locales/fr.pak
-
Locales/gu.pak
-
Locales/he.pak
-
Locales/hi.pak
-
Locales/hr.pak
-
Locales/hu.pak
-
Locales/id.pak
-
Locales/it.pak
-
Locales/ja.pak
-
Locales/kn.pak
-
Locales/ko.pak
-
Locales/lt.pak
-
Locales/lv.pak
-
Locales/ml.pak
-
Locales/mr.pak
-
Locales/ms.pak
-
Locales/nb.pak
-
Locales/nl.pak
-
Locales/pl.pak
-
Locales/pt-BR.pak
-
Locales/pt-PT.pak
-
Locales/ro.pak
-
Locales/ru.pak
-
Locales/sk.pak
-
Locales/sl.pak
-
Locales/sr.pak
-
Locales/sv.pak
-
Locales/sw.pak
-
Locales/ta.pak
-
Locales/te.pak
-
Locales/th.pak
-
Locales/tr.pak
-
Locales/uk.pak
-
Locales/vi.pak
-
Locales/zh-CN.pak
-
Locales/zh-TW.pak
-
New Text Document.txt
-
bin.dll
-
file.dll.dll windows x86
Password: 1515
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10.6MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 572KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ