Static task
static1
Behavioral task
behavioral1
Sample
LoK.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
LoK.exe
Resource
win10v2004-20220812-en
General
-
Target
LoK.exe
-
Size
6.5MB
-
MD5
e7e3fecd53f3ff6803730272269635e2
-
SHA1
9db4d6398f35c143f118b96eaf3409853f51c3a4
-
SHA256
497eedaf07af54241ae2357fb9c57908e5947c2e547de4e1363e116ce9f4f683
-
SHA512
1b5b8d66b42f07d645bb1942944f8420b2335e546e3a9ebfc8c76c28c390e45f9dc50f2ebece330f6ce4615e2fbc80a790b1e8e9223cf4bad21384ab2a35a952
-
SSDEEP
98304:6i/7pVohAXj6T7iQAZZpP7bdNDxWzV4BGGTsG0o:7VKAz6T7enxOm
Malware Config
Signatures
Files
-
LoK.exe.exe windows x86
9d619c81a0fad2442b36f1d26f114ea1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
LeaveCriticalSection
InterlockedExchangeAdd
VirtualQuery
EnterCriticalSection
GetModuleFileNameA
DeleteCriticalSection
WaitForMultipleObjectsEx
SleepEx
SetCriticalSectionSpinCount
GetExitCodeThread
CreateEventA
ResetEvent
GetProcessAffinityMask
SetThreadAffinityMask
GetThreadPriority
SetEvent
GetSystemInfo
GetTickCount
SetEndOfFile
MoveFileA
SetFilePointer
SetEnvironmentVariableA
CreateEventW
InitializeCriticalSection
ReadConsoleW
FlushFileBuffers
WriteConsoleW
HeapDestroy
HeapCreate
HeapAlloc
HeapFree
CreateSemaphoreA
CloseHandle
WaitForSingleObject
ReleaseSemaphore
SetThreadPriority
ResumeThread
OpenThread
GetCurrentThreadId
Sleep
CreateFileA
FileTimeToSystemTime
GetFileSize
ReadFile
WriteFile
GetFileAttributesA
DeleteFileA
CreateDirectoryA
CreateMutexA
GetLastError
ReleaseMutex
SetLastError
GetModuleHandleA
IsDebuggerPresent
QueryPerformanceFrequency
QueryPerformanceCounter
FindFirstFileA
FindNextFileA
FindClose
GlobalAlloc
GlobalSize
GlobalFree
SetCurrentDirectoryA
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
GetCommandLineA
CreateThread
ExitThread
GetProcAddress
LoadLibraryExW
FindFirstFileExA
SystemTimeToTzSpecificLocalTime
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcessHeap
GetFileType
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
InterlockedExchange
FreeLibrary
HeapReAlloc
OutputDebugStringW
LoadLibraryW
CompareStringW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
user32
GetClientRect
PeekMessageA
SetWindowLongW
GetWindowLongW
GetForegroundWindow
CallWindowProcW
UnregisterDeviceNotification
RegisterDeviceNotificationW
SwapMouseButton
ClientToScreen
ShowCursor
ScreenToClient
GetCursorPos
ClipCursor
SetCursorPos
GetWindowRect
GetWindowLongA
SetWindowLongA
AdjustWindowRect
SetWindowPos
EnumDisplaySettingsA
MessageBoxA
SendMessageA
MessageBoxW
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
UnregisterClassA
GetSystemMetrics
CreateWindowExA
DestroyWindow
TranslateMessage
DispatchMessageA
GetDesktopWindow
GetDC
ShowWindow
UpdateWindow
BeginPaint
EndPaint
shell32
SHGetSpecialFolderPathA
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTexture
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXGetShaderConstantTable
steam_api
SteamUserStats
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallback
SteamAPI_RunCallbacks
SteamAPI_Init
SteamAPI_Shutdown
SteamUser
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
dinput8
DirectInput8Create
xinput1_3
ord2
ord3
gdi32
GetObjectA
GetDeviceCaps
ole32
CoInitializeEx
OleInitialize
CreateStreamOnHGlobal
OleUninitialize
CoInitialize
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
oleaut32
OleLoadPicture
SysFreeString
SysAllocString
Sections
.text Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 717KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 269KB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 502KB - Virtual size: 502KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ