Static task
static1
Behavioral task
behavioral1
Sample
EN-US/Aut0W0rkplaceN.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
EN-US/Aut0W0rkplaceN.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
EN-US/avicap32.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
EN-US/avicap32.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
FileSetup.exe
Resource
win7-20230220-en
General
-
Target
FullFiles-2022-PaSS.rar
-
Size
11.5MB
-
MD5
dfaf5ad6ad73d1e20526893d9ed9d589
-
SHA1
c3728a8f842bd7122ece549e0d67dfd497bba444
-
SHA256
f8049271309b5ed8a3bfed91b316b5dae91a7f9df0c7ac5e931805f4b601ad29
-
SHA512
4ddf49836de13d457fa94f2f9686f297f279d091612b37867137b2412f66bee5fb915ba0a99071814880d6f08d2269e607d7e5e06cacd2a42fc0278f9af4789d
-
SSDEEP
196608:gaX4pWRh+/sVv80Cp2daYUQSBgHTixRkXln0ZOnL6RJ8wLWF1g68fgQQRFxV2dhA:gw+2+RYxSBY8w8cAJ8OWF1g9xQRvVghC
Malware Config
Signatures
Files
-
FullFiles-2022-PaSS.rar.rar
Password: 2022
-
BasicFullinfo.txt
-
FullNew-Setups1-_2022_Aa_PasWrd.rar.rar
Password: 2022
-
EN-US/Aut0W0rkplaceN.dll.mui.dll windows x86
Password: 2022
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
EN-US/avicap32.dll.mui.dll windows x86
Password: 2022
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
F0nts/8514sys.fon
-
F0nts/d0sapp.fon
-
F0nts/smalle.fon
-
F0nts/symb0l.ttf
-
F0nts/trebucbd.ttf
-
F0nts/trebucbi.ttf
-
F0nts/verdana.ttf
-
F0nts/verdanab.ttf
-
FileSetup.exe.exe windows x86
Password: 2022
e0224bb1f86777b26682b150d90a08db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
IsRectEmpty
CharUpperBuffW
gdi32
GetDeviceCaps
ole32
CoInitialize
Sections
.text Size: - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.*^2 Size: - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.h(- Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.;Df Size: 10.6MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
L0cals/am.pak
-
L0cals/ar.pak
-
L0cals/fi.pak
-
L0cals/fil.pak
-
L0cals/fr.pak
-
L0cals/gu.pak
-
L0cals/he.pak
-
L0cals/hi.pak
-
L0cals/hr.pak
-
L0cals/hu.pak
-
L0cals/id.pak
-
L0cals/lt.pak
-
L0cals/lv.pak