Joq975
SendData
YVGbR69G
Static task
static1
Behavioral task
behavioral1
Sample
DKyVKmgVSvviRl.bat
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
DKyVKmgVSvviRl.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
aMLjTIhBvevLGx.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
aMLjTIhBvevLGx.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
details.lnk
Resource
win7-20240903-en
Target
d9060dfa2592d33946220f9a80864f50d11f680ba5f7774e81fc43879a848c60.zip
Size
727KB
MD5
6e9fde86f1ebc90f06cb984651d843e5
SHA1
5dbf7d3fe3245045827a3daf9ae31bdd0f44195c
SHA256
dbe4bfcec54587629aff611def62a726d0faae2ac3d1603b10b2bb477eb358e3
SHA512
7119efad08b396bfabe6051cb3f7687617fda9c33c2fd9f1aa3393ea32b5fb4d329fdce75e686d684a67dfedc80871f8b9a86a932a66e2369df75d9f92fddde9
SSDEEP
12288:lbqn8OCcQ3d8MEZTb2YuX9/1QBD8I8+GfRwIdf4q+1/Rw38+FSRPD7bqCafFPCjh:McdbEZTiYAAc+u1fMNO3D4PnbsfM
Checks for missing Authenticode signature.
resource |
---|
unpack002/aMLjTIhBvevLGx.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
LockFile
ReadFile
UnlockFile
CloseHandle
GetLastError
ConnectNamedPipe
HeapCreate
GetCurrentProcessId
GetCurrentThreadId
VirtualAlloc
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleHandleA
CreateFileMappingA
OpenFileMappingA
CreateNamedPipeA
CreateActCtxA
ActivateActCtx
DeactivateActCtx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
FindFirstFileExA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
LoadLibraryExW
LCMapStringW
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW
RtlUnwindEx
Joq975
SendData
YVGbR69G
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ