Static task
static1
General
-
Target
dohnadohna.exe
-
Size
4.8MB
-
MD5
0063662a0d49ebcd6483c0e8bcb2890a
-
SHA1
cce1f2d0d4339e09ef1d101b381fe4bc1324bb61
-
SHA256
d7723223b6da889a227e2445daa366c8dc6a09d74dc8cdc23b9891f05ff055c1
-
SHA512
b3e5d916949b2755507f810b9a82eb9c2a6cc1b78833bed9dabe72a79510a515982c2912abe490640aa6ab902cc52b8af58f005b18184dac327b31f166d98615
-
SSDEEP
98304:BRU7uPZER766WMEN0n2nAnQoxwGyBe11ZZZdZt8F:9PZEp6hMinAnsGyBo1ZZZdZt8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dohnadohna.exe
Files
-
dohnadohna.exe.exe windows:6 windows x86
e7723a9b7fca5f7ba1da8ab141cee2b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetFileAttributesA
CopyFileA
FileTimeToSystemTime
DeleteFileA
FileTimeToLocalFileTime
RemoveDirectoryA
CreateDirectoryA
GetFileTime
ExitProcess
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
CreateMutexA
GetLastError
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentDirectoryA
SizeofResource
FindResourceA
LockResource
LoadResource
VerifyVersionInfoA
GetLocaleInfoA
GetNativeSystemInfo
VerSetConditionMask
GlobalMemoryStatusEx
SetCurrentDirectoryA
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetACP
GetStdHandle
GetFileType
CreateFileW
SetFilePointerEx
GetModuleHandleExW
ExitThread
RtlUnwind
LoadLibraryW
FindNextFileA
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
LoadLibraryExW
GetModuleFileNameW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCurrentThread
WaitForSingleObjectEx
DuplicateHandle
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
GetCPInfo
TryEnterCriticalSection
FindFirstFileA
GetFileSize
CreateFileA
SetFilePointer
WriteFile
HeapFree
ReadFile
GetModuleFileNameA
GetCurrentThreadId
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetProcessId
Sleep
WaitForMultipleObjects
GetExitCodeProcess
OpenProcess
CreateEventA
ResetEvent
CloseHandle
SetEvent
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
QueueUserWorkItem
IsProcessorFeaturePresent
RaiseException
DecodePointer
EncodePointer
WideCharToMultiByte
GetStringTypeW
MultiByteToWideChar
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
K32GetProcessMemoryInfo
GetCurrentProcess
GetProcessHeap
HeapAlloc
HeapReAlloc
UnregisterWaitEx
ReleaseSRWLockExclusive
HeapSize
user32
GetCursorPos
ShowCursor
PtInRect
GetKeyState
GetForegroundWindow
ScreenToClient
UpdateWindow
GetParent
GetWindowThreadProcessId
GetWindow
SetActiveWindow
GetTopWindow
SendMessageA
SetForegroundWindow
DispatchMessageA
TranslateMessage
PeekMessageA
GetClientRect
LoadCursorA
RegisterClassA
CreateWindowExA
UnregisterClassA
SetTimer
KillTimer
CreatePopupMenu
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
ChangeDisplaySettingsA
EnumDisplaySettingsA
GetDesktopWindow
DialogBoxParamA
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
TranslateAcceleratorA
LoadAcceleratorsA
EndDialog
GetDlgItem
EnableWindow
IsDlgButtonChecked
SetScrollInfo
GetScrollInfo
GetScrollPos
SetScrollPos
GetWindowPlacement
GetDC
DrawTextA
ReleaseDC
CloseWindow
LoadMenuA
OpenIcon
GetMenu
InsertMenuA
FillRect
SetKeyboardState
GetKeyboardState
GetSubMenu
GetActiveWindow
SetWindowLongA
ClientToScreen
GetWindowLongA
ValidateRect
SetWindowTextA
MessageBoxA
DestroyMenu
SetCapture
LoadIconA
PostQuitMessage
ReleaseCapture
InvalidateRect
IsIconic
SetCursorPos
BeginPaint
EndPaint
GetSystemMenu
GetWindowRect
DestroyWindow
SetWindowPos
PostMessageA
GetSystemMetrics
ShowWindow
GetWindowTextA
MoveWindow
SetMenu
DefWindowProcA
SetFocus
DrawMenuBar
EnableMenuItem
gdi32
CreateFontA
SelectObject
DeleteDC
SetTextColor
DeleteObject
CreateSolidBrush
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
GetDeviceCaps
CreateDIBSection
TextOutA
SetBkMode
SetBkColor
GetStockObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegCloseKey
RegOpenKeyExA
shell32
DragAcceptFiles
DragFinish
ShellExecuteA
DragQueryFileA
SHGetFolderPathA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
imm32
ImmNotifyIME
ImmSetOpenStatus
ImmGetOpenStatus
ImmSetCompositionWindow
ImmGetCandidateListA
ImmReleaseContext
ImmGetContext
ImmSetCompositionFontA
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps
wininet
InternetReadFile
HttpSendRequestA
InternetConnectA
InternetAttemptConnect
HttpOpenRequestA
InternetOpenA
InternetCloseHandle
d3d11
D3D11CreateDevice
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ