Static task
static1
Behavioral task
behavioral1
Sample
lkddfz/˖|縨V4.7ʽ.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
lkddfz/˖|縨V4.7ʽ.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
lkddfz/.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
lkddfz/.url
Resource
win10v2004-20231215-en
General
-
Target
0246b509a7c9320766805e968e520c09
-
Size
4.2MB
-
MD5
0246b509a7c9320766805e968e520c09
-
SHA1
77647c326029de9de1abcdf3df8d42d990eec5d7
-
SHA256
80e7c6935bbef915ad8eb004080ab86bd614fa40e097c940a381ea5981573be6
-
SHA512
6357f020aa7bbf44232fcf94d04f65b8a179a9bb3a3e05b8a803e38b5077225bd6385e282a117c8f1f6839647945367143a37da8f2af3b9f719122604b3d6d96
-
SSDEEP
98304:EDj+nhwVMgWtfG5s5lm+s9yMhq2Xuw0d2XdLnXp4Hflp/eQ:TnhaWfJlm+s9zI2XdL54/l3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/lkddfz/˖|縨V4.7ʽ.exe
Files
-
0246b509a7c9320766805e968e520c09.zip
-
lkddfz/readme.txt
-
lkddfz/˖|縨V4.7ʽ.exe.exe windows:5 windows x86 arch:x86
87095da59c785793cfa0c1760ce1dfbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutUnprepareHeader
ws2_32
accept
rasapi32
RasHangUpA
kernel32
Process32First
user32
wsprintfA
gdi32
TextOutA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayCreate
comctl32
ImageList_GetIcon
oledlg
ord8
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
lkddfz/.url