Static task
static1
General
-
Target
ValoKeaz.exe
-
Size
815KB
-
MD5
e79a808bbb8f665205bb6c4842e5d9c5
-
SHA1
ece77df3c7583c98701c3eb2c978d927265f0e71
-
SHA256
bf740f05fde91074aeef8cc904f5f1f33013093eb8c29893ad03d1fd83696db7
-
SHA512
0f46c2d1c1d3605bb4a51533d21367f9d7f7c993251fef659dccd372efdcab0c7552230ecb1e02f40e5c142c769a3a454c6d427b9b7e1ef2ab8dad0777ba76cb
-
SSDEEP
12288:NF+l/cbSbImJlgwpfJCoLWgkDY8eSa40OAMlnuG/RJS:NFKcbolgwBJpLWRY8ee0OXlnH/S
Malware Config
Signatures
Files
-
ValoKeaz.exe.exe windows x64
88b8e704c2adb7189ea1487e998f6c1a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
opengl32
glClear
wglGetCurrentDC
glViewport
wglGetProcAddress
glGetString
glPixelStorei
glDisable
glDrawElements
glGetIntegerv
glTexImage2D
glDeleteTextures
glTexParameteri
glScissor
glEnable
glGenTextures
glBindTexture
glPolygonMode
glIsEnabled
kernel32
VirtualQuery
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
DeviceIoControl
CreateFileW
CreateToolhelp32Snapshot
Sleep
Process32Next
CloseHandle
GetModuleHandleW
SetThreadExecutionState
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
VerSetConditionMask
FormatMessageW
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
user32
RegisterRawInputDevices
GetRawInputDeviceInfoA
GetRawInputDeviceList
RegisterDeviceNotificationW
UnregisterDeviceNotification
ToUnicode
ChangeDisplaySettingsExW
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDisplayDevicesW
EnumDisplayMonitors
RegisterClassExW
GetRawInputData
GetClassLongPtrW
SetWindowLongW
GetWindowLongW
PtInRect
SetRect
ClipCursor
WindowFromPoint
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
AdjustWindowRectEx
GetMonitorInfoW
MonitorFromWindow
SystemParametersInfoW
CreateIconIndirect
LoadImageW
LoadCursorW
GetWindowRect
GetClientRect
SetWindowTextW
RemovePropW
GetPropW
SetPropW
ReleaseDC
GetDC
MsgWaitForMultipleObjects
ReleaseCapture
SetCapture
MapVirtualKeyW
GetKeyState
GetActiveWindow
SetFocus
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
SetWindowPos
MoveWindow
FlashWindow
SetLayeredWindowAttributes
GetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExW
UnregisterClassW
DefWindowProcW
WaitMessage
PostMessageW
SendMessageW
GetMessageTime
PeekMessageW
DispatchMessageW
TranslateMessage
TrackMouseEvent
GetWindowThreadProcessId
GetSystemMetrics
IsWindow
GetAsyncKeyState
EnumWindows
mouse_event
SetForegroundWindow
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
DestroyIcon
SetClipboardData
gdi32
CreateBitmap
CreateRectRgn
DeleteObject
CreateDIBSection
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
CreateDCW
DeleteDC
GetDeviceCaps
GetDeviceGammaRamp
SetDeviceGammaRamp
shell32
DragFinish
DragQueryPoint
DragQueryFileW
DragAcceptFiles
msvcp140
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
imm32
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memchr
__std_terminate
__vcrt_LoadLibraryExW
__vcrt_GetModuleFileNameW
__C_specific_handler_noexcept
_CxxThrowException
strstr
__C_specific_handler
__current_exception_context
__current_exception
memcmp
memmove
__std_exception_destroy
memset
__std_exception_copy
memcpy
api-ms-win-crt-stdio-l1-1-0
ftell
__acrt_iob_func
fflush
fclose
_set_fmode
__p__commode
__stdio_common_vfprintf
fwrite
fseek
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
api-ms-win-crt-string-l1-1-0
strcpy
strlen
wcscpy
strspn
strncpy
strcspn
strcpy_s
strcat_s
strcmp
strncmp
wcscmp
api-ms-win-crt-utility-l1-1-0
abs
qsort
api-ms-win-crt-heap-l1-1-0
free
malloc
calloc
realloc
_set_new_mode
_callnewh
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_exit
terminate
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_get_initial_narrow_environment
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_set_app_type
_invalid_parameter_noinfo_noreturn
exit
_beginthread
_seh_filter_exe
_cexit
_wassert
system
api-ms-win-crt-convert-l1-1-0
strtoul
atof
api-ms-win-crt-time-l1-1-0
clock
api-ms-win-crt-math-l1-1-0
sinf
sqrtf
cosf
ceilf
atanf
acosf
powf
__setusermatherr
fmodf
tanf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ