Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Jaik.140853.2506.12420.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Jaik.140853.2506.12420.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Variant.Jaik.140853.2506.12420.exe
-
Size
87KB
-
MD5
82257f4df505e1844f432d59f5d17a19
-
SHA1
fbdfa83ccd940784682845bba0749bea98e7d51f
-
SHA256
3e3cb3c50be2631c4eb8d28d88dde31f88454e86d684789d3d4f891b097a9892
-
SHA512
8db3d5af04989c56a1efb3842145edeea0615983a34bd4b616e8dbb25d7ef0aead9cf8143e1f153316d222c4540769567e3b33ae25f721eabd3d28e82ebcee75
-
SSDEEP
1536:Khpx1pZOsdMi2dlgVdiIiZQR99TEQ3CyAuklZfpwcyFOVbl2sW8KcdvVdyP:KhBd2dlgVBiZi3CyAugfuOVtvHyP
Malware Config
Signatures
Files
-
SecuriteInfo.com.Variant.Jaik.140853.2506.12420.exe.exe windows x86
26ef0946c6abfa2c7c249b8994ac8e6a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetCompositionStringA
ImmRegisterWordA
ImmLockIMCC
ImmSetCompositionStringA
ImmDestroySoftKeyboard
ImmAssociateContext
ImmGetCandidateListCountA
ImmGetIMEFileNameW
kernel32
MultiByteToWideChar
GetLocaleInfoW
DecodePointer
EncodePointer
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
LCMapStringW
GetFileType
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetDateFormatW
GetStringTypeW
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
LoadLibraryExW
GetProcAddress
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
VirtualFree
VirtualAlloc
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
SetLastError
GetLastError
CloseHandle
TerminateProcess
WriteFile
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
FileTimeToSystemTime
CreateFileMappingA
lstrlenW
CreateFileW
CreateFileA
FormatMessageW
FreeLibrary
UnmapViewOfFile
MapViewOfFile
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
mapi32
ord182
ord190
ord26
ord53
ord164
ord183
rpcrt4
NdrRpcSmClientAllocate
RpcMgmtSetAuthorizationFn
RpcSmSetClientAllocFree
NdrCStdStubBuffer_Release
NdrConformantArrayBufferSize
NdrInterfacePointerMarshall
oleaut32
VarDateFromI4
SafeArrayGetRecordInfo
GetRecordInfoFromTypeInfo
VariantChangeType
VarCyCmpR8
VarBstrFromI1
VarR8FromCy
user32
SendMessageW
LoadStringW
ChildWindowFromPointEx
SendNotifyMessageA
GetDlgCtrlID
wvsprintfW
GetKeyboardLayoutNameA
avifil32
AVIStreamInfo
AVISave
AVIStreamSetFormat
AVIFileInfo
AVIStreamOpenFromFileA
AVIMakeStreamFromClipboard
EditStreamSetInfoW
msvfw32
DrawDibClose
ICSeqCompressFrame
avicap32
AppCleanup
mpr
WNetOpenEnumW
WNetGetNetworkInformationA
WNetDisconnectDialog1W
WNetAddConnection2W
MultinetGetConnectionPerformanceW
WNetEnumResourceA
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ