GPa606j
HUF_inc_var
Tsw3286E
Overview
overview
7Static
static
3WX.pdf.lnk
windows7-x64
3WX.pdf.lnk
windows10-2004-x64
7i1v/zN/JI/...qd.pdf
windows7-x64
1i1v/zN/JI/...qd.pdf
windows10-2004-x64
1i1v/zN/JI/...im.exe
windows7-x64
i1v/zN/JI/...im.exe
windows10-2004-x64
1i1v/zN/JI/...Sa.dll
windows7-x64
3i1v/zN/JI/...Sa.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
WX.pdf.lnk
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
WX.pdf.lnk
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
i1v/zN/JI/eWJM/MVst/qI/1Q52/uURq/QIPJ/J4Xw/J6V/CO/bOs8/GMV/N53B/Abqd.pdf
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
i1v/zN/JI/eWJM/MVst/qI/1Q52/uURq/QIPJ/J4Xw/J6V/CO/bOs8/GMV/N53B/Abqd.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
i1v/zN/JI/eWJM/MVst/qI/1Q52/uURq/QIPJ/J4Xw/J6V/CO/bOs8/GMV/N53B/bootim.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
i1v/zN/JI/eWJM/MVst/qI/1Q52/uURq/QIPJ/J4Xw/J6V/CO/bOs8/GMV/N53B/bootim.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
i1v/zN/JI/eWJM/MVst/qI/1Q52/uURq/QIPJ/J4Xw/J6V/CO/bOs8/GMV/N53B/xSa.dll
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
i1v/zN/JI/eWJM/MVst/qI/1Q52/uURq/QIPJ/J4Xw/J6V/CO/bOs8/GMV/N53B/xSa.dll
Resource
win10v2004-20230915-en
Target
QEK.zip
Size
862KB
MD5
8440700ec4ae3139e2cfa49af6cf9b33
SHA1
b030847c0c8d788dc035ee8b61419f1350982f06
SHA256
b6269018ac32484bdc093a6bec324fc9aa7990104a297f55600d31bff95ed6fd
SHA512
4b1f1c6459ff7f51dbc141a6864b71246c6a518486fb753dc1c3797e9364746a441da451159c8f67a90f0572a703b6b41eb44bafe6289f4905654b6b4b0c2128
SSDEEP
24576:a+TaOijDryUFpCmRn8rFNXf2uopYVxLfUwK8Rq2:a+DizymR8rFLWOfxZ
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/i1v/zN/JI/eWJM/MVst/qI/1Q52/uURq/QIPJ/J4Xw/J6V/CO/bOs8/GMV/N53B/bootim.exe |
unpack001/i1v/zN/JI/eWJM/MVst/qI/1Q52/uURq/QIPJ/J4Xw/J6V/CO/bOs8/GMV/N53B/xSa.log |
http://www.benefits.ml.com
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetSystemMetrics
_wcmdln
_fmode
_XcptFilter
_wtol
_commode
__C_specific_handler
_initterm
_wcsnicmp
wcschr
memset
_lock
_amsg_exit
_unlock
__dllonexit
_wcsicmp
memcpy_s
__setusermatherr
_cexit
_onexit
_exit
_vsnwprintf
exit
?terminate@@YAXXZ
__set_app_type
__wgetmainargs
ord9
ord12
GetProcAddress
GetModuleFileNameA
GetModuleHandleW
GetModuleHandleExW
ReleaseMutex
WaitForSingleObjectEx
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreExW
CreateMutexExW
OpenSemaphoreW
HeapFree
HeapAlloc
GetProcessHeap
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter
GetLastError
GetCommandLineW
RegGetValueW
RegCloseKey
RegOpenKeyExW
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
GetStartupInfoW
FormatMessageW
SetProcessPreferredUILanguages
DebugBreak
IsDebuggerPresent
OutputDebugStringW
RegDeleteKeyValueW
CloseHandle
LocalFree
Sleep
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
CommandLineToArgvW
StrToIntExW
RtlNtStatusToDosError
NtQuerySystemInformation
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcessHeap
CreateFileA
CloseHandle
GetLastError
ConvertThreadToFiber
SwitchToFiber
CreateActCtxA
ActivateActCtx
DeactivateActCtx
FindFirstFileA
FindNextFileA
GetSystemDirectoryA
SetCurrentDirectoryA
ReadFile
SetFilePointer
ReleaseActCtx
SetFileTime
VirtualAlloc
DeviceIoControl
GetLocalTime
GPa606j
HUF_inc_var
Tsw3286E
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ