9.7z
- SHA256 d12c8c6869822b02333d2fb6d064774a3ff9eb9844465da5e56fe337ff0cbaeb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader/3.dll
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader/3.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
loader/loader.bat
Resource
win7-20230220-en
windows7-x64
3 signatures
150 seconds
General
- Target 9.7z
- Size 343KB
- Sample230620-tgryfsch75
- SHA256 d12c8c6869822b02333d2fb6d064774a3ff9eb9844465da5e56fe337ff0cbaeb
- MD5 6f652b9489bf0bf5185db5c67fee1677
- SHA1 9514f5f457ae319e7fea49ced19e1168ef589b97
- SHA512 fd05ab744cf8bdaaef21cf5947a49943209c4b5b1c65c30defade9e3cf0d2d16c66a1f54a9f94da2d9b4567279e6fe3667a59970606c4aa47fb0664e411c5adc
- SSDEEP 6144:+EVrMpRi+UEdCi+nceYFurVTqpMX6GMSMmahylbWd8QtU9FKm7q:pi+JcqceYITqpgahAWd8mUjx7q
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/loader/3.dll
File Explorer
-
9.7z.7z 343KB
-
loader/3.dll.dll 833KB
-
loader/loader.bat39B
loader/3.dll
- IMPHASH fe1bad1210fb9866013ea023b05102bb
- SHA256 0fb7b6a296ffa9e0f399d14ba0913d419781a28c2b1c93f4b77c2b1f66d6e71b
- MD5 d7c4fe09863d32f120b9c9f8482f91e2
- SHA1 99bd1ccb34ff47f5299f359349d5733bc0db5b64
- SHA512 8ff8a04b9fb251d62d2dfb47ac53c13ed58913a7c61653ce1097ee3c6733bb40d4d8010028193dba346bf2e3d340ac61a22b9f73de3cfb19fed127255226057f
- SSDEEP 24576:3C4lIeA97+mgxDkID8c4aykLy6GNZDjf:37iovQatLy
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
Major OS version
Entry point
5120
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
gdi32
BitBlt
ChoosePixelFormat
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreatePalette
DeleteDC
DeleteObject
DescribePixelFormat
GetDIBits
GetDeviceGammaRamp
GetSystemPaletteEntries
GetSystemPaletteUse
RealizePalette
SelectObject
SelectPalette
SetDIBColorTable
SetDeviceGammaRamp
SetPaletteEntries
SetPixelFormat
SetSystemPaletteUse
SwapBuffers
UnrealizeObject
kernel32
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileW
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetFileSize
GetLastError
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
user32
AdjustWindowRect
AdjustWindowRectEx
BeginPaint
CallWindowProcA
ChangeDisplaySettingsA
ClientToScreen
ClipCursor
CreateCursor
CreateIconFromResourceEx
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageA
EndPaint
EnumDisplaySettingsA
GetClassInfoA
GetClientRect
GetCursor
GetCursorPos
GetDC
GetFocus
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutNameA
GetKeyboardState
GetMenu
GetMessageA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
InvalidateRect
IsZoomed
KillTimer
LoadImageA
LoadKeyboardLayoutA
MapVirtualKeyExA
MapWindowPoints
MessageBoxA
MessageBoxW
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
ReleaseCapture
ReleaseDC
ScreenToClient
SetCapture
SetClassLongA
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
ToAsciiEx
ToUnicode
TranslateMessage
UnregisterClassA
WindowFromPoint
kMG_Init
kMG_InvertAlpha
kMG_Linked_Version
kMG_Load
kMG_LoadBMP_RW
kMG_LoadCUR_RW
kMG_LoadGIF_RW
kMG_LoadICO_RW
kMG_LoadJPG_RW
kMG_LoadLBM_RW
kMG_LoadPCX_RW
kMG_LoadPNG_RW
kMG_LoadPNM_RW
kMG_LoadTGA_RW
kMG_LoadTIF_RW
kMG_LoadTyped_RW
kMG_LoadWEBP_RW
kMG_LoadXCF_RW
kMG_LoadXPM_RW
kMG_LoadXV_RW
kMG_Load_RW
kMG_Quit
kMG_ReadXPMFromArray
kMG_isBMP
kMG_isCUR
kMG_isGIF
kMG_isICO
kMG_isJPG
kMG_isLBM
kMG_isPCX
kMG_isPNG
kMG_isPNM
kMG_isTIF
kMG_isWEBP
kMG_isXCF
kMG_isXPM
kMG_isXV
kDL_AddTimer
kDL_AllocRW
kDL_AudioDriverName
kDL_AudioInit
kDL_AudioQuit
kDL_BuildAudioCVT
kDL_ClearError
kDL_CloseAudio
kDL_ConvertAudio
kDL_ConvertSurface
kDL_CreateCursor
kDL_CreateMutex
kDL_CreateRGBSurface
kDL_CreateRGBSurfaceFrom
kDL_CreateSemaphore
kDL_CreateThread
kDL_Delay
kDL_DestroyMutex
kDL_DestroySemaphore
kDL_DisplayFormat
kDL_DisplayFormatAlpha
kDL_EnableKeyRepeat
kDL_EnableUNICODE
kDL_Error
kDL_EventState
kDL_FillRect
kDL_Flip
kDL_FreeCursor
kDL_FreeRW
kDL_FreeSurface
kDL_GL_GetAttribute
kDL_GL_GetProcAddress
kDL_GL_LoadLibrary
kDL_GL_Lock
kDL_GL_SetAttribute
kDL_GL_SwapBuffers
kDL_GL_Unlock
kDL_GL_UpdateRects
kDL_GetAppState
kDL_GetAudioStatus
kDL_GetClipRect
kDL_GetCursor
kDL_GetError
kDL_GetEventFilter
kDL_GetKeyName
kDL_GetKeyRepeat
kDL_GetKeyState
kDL_GetModState
kDL_GetMouseState
kDL_GetRGB
kDL_GetRGBA
kDL_GetRelativeMouseState
kDL_GetThreadID
kDL_GetTicks
kDL_GetVideoInfo
kDL_GetVideoSurface
kDL_GetWMInfo
kDL_Has3DNow
kDL_Has3DNowExt
kDL_HasAltiVec
kDL_HasMMX
kDL_HasMMXExt
kDL_HasRDTSC
kDL_HasSSE
kDL_HasSSE2
kDL_Init
kDL_InitSubSystem
kDL_KillThread
kDL_Linked_Version
kDL_ListModes
kDL_LockAudio
kDL_LockSurface
kDL_LowerBlit
kDL_MapRGB
kDL_MapRGBA
kDL_OpenAudio
kDL_PauseAudio
kDL_PeepEvents
kDL_PollEvent
kDL_PumpEvents
kDL_PushEvent
kDL_Quit
kDL_QuitSubSystem
kDL_RWFromConstMem
kDL_RWFromFP
kDL_RWFromFile
kDL_RWFromMem
kDL_ReadBE16
kDL_ReadBE32
kDL_ReadBE64
kDL_ReadLE16
kDL_ReadLE32
kDL_ReadLE64
kDL_RegisterApp
kDL_RemoveTimer
kDL_SemPost
kDL_SemTryWait
kDL_SemValue
kDL_SemWait
kDL_SemWaitTimeout
kDL_SetAlpha
kDL_SetClipRect
kDL_SetColorKey
kDL_SetColors
kDL_SetCursor
kDL_SetError
kDL_SetEventFilter
kDL_SetModState
kDL_SetModuleHandle
kDL_SetPalette
kDL_SetTimer
kDL_SetVideoMode
kDL_ShowCursor
kDL_ThreadID
kDL_UnlockAudio
kDL_UnlockSurface
kDL_UnregisterApp
kDL_UpdateRect
kDL_UpdateRects
kDL_UpperBlit
kDL_VideoDriverName
kDL_VideoInit
kDL_VideoModeOK
kDL_VideoQuit
kDL_WM_GetCaption
kDL_WM_GrabInput
kDL_WM_IconifyWindow
kDL_WM_SetCaption
kDL_WM_SetIcon
kDL_WM_ToggleFullScreen
kDL_WaitEvent
kDL_WaitThread
kDL_WarpMouse
kDL_WasInit
kDL_WriteBE16
kDL_WriteBE32
kDL_WriteBE64
kDL_WriteLE16
kDL_WriteLE32
kDL_WriteLE64
kDL_getenv
kDL_iconv
kDL_iconv_close
kDL_iconv_open
kDL_iconv_string
kDL_memcmp
kDL_mutexP
kDL_mutexV
kDL_putenv
kDL_strlcat
kDL_strlcpy
kDL_strtod
klc_entry__3_0_0f
klc_entry_copyright__3_0_0f
must
Name
.text
Size
493KB
Virtual Size
492KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
572B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
167KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
108KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
loader/loader.bat
- SHA256 e789899d717cec72308924d3cba1daca17c6d2a93214d4d7b47f75a77ba29cd1
- MD5 6bf98143e1fe98d1cf77c8730396bb22
- SHA1 38a219ce77e6dde8e91bef23fd518836a6e384c6
- SHA512 0c10604f30ff0eacb265c871a432e7a6b1474af65b46f6ddb075c4aa5ed4332e024de52df433eaa5908c5caffb32299844ebbeed88550b0306371043f8057308
- MD5 SHA1 SHA512