kockaland-win64-v0.1.0.zip
- SHA256 9d5a207823b5dbd4415725f82ce30e2d3b6b7fe1dc65826a83e0335c46245cb8
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kockaland.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
kockaland.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target kockaland-win64-v0.1.0.zip
- Size 7.8MB
- Sample261002-g7887ssdqa
- SHA256 9d5a207823b5dbd4415725f82ce30e2d3b6b7fe1dc65826a83e0335c46245cb8
- MD5 ea03ae2fb65b0adf1ec0c2d0afbf56e6
- SHA1 2c9e2c7f30182643953935c13f1e0b2dbcaf182e
- SHA512 d08a92ce03276a16db8bd639138c98bca11b1d49f1aacf1d9ecd5184d2785426d912c9322c6efdb238aaa38a1fb7f703ba5c0038eafd5cc1fc9981f7c6903266
- SSDEEP 196608:qcGU+Og202iQd2UPmIlpvLYoK3VY5xFoFE/sq/9QnxG+h/eo2LDr1:qr32ddb+Ilp0ocY1AI9Qw+Feo2Pr1
- TLSH T1C586331FA56736E27985EF29D397F9D0E7231D0423B3639EE27508DE10E948DDC24A22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/kockaland.exe
File Explorer
-
kockaland-win64-v0.1.0.zip.zip 7.8MB
-
kockaland.exe.exe 21.0MB
kockaland.exe
- IMPHASH 74081da0f962a8df9a7da3af92c86227
- SHA256 846ecc146bae3d0b5b1921e1243b630ddc76636d06758ac6c00407c70495b9b9
- MD5 f988eb9549537b2129d4b2b2776af016
- SHA1 460e827ab120bda3681cf44379b2b246ed0af752
- SHA512 e18d2abc3d68864591a83e2384cb457643d14d16ad498b29234d9b117c4afcf602b03749730f331732230d2a8644b4ce7ca1fa034f12dd150f3b42d3cf03758c
- SSDEEP 196608:qRHKomIUO4xMaIeVr9iq6fMkuI+XqYgGCCd8dvnVHjTLF:Y0IvRunqYgxdvnVHjTLF
- TLSH T108278E03F56515ACC96BD234839E6337FB3538894135BEBB0A719B312E62B919F1EB04
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
SystemFunction036
bcrypt
BCryptGenRandom
kernel32
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwindEx
VirtualProtect
VirtualQuery
__C_specific_handler
CancelIo
CompareStringOrdinal
CopyFileExW
CreateDirectoryW
CreateFileMappingA
CreateFileW
CreateHardLinkW
CreatePipe
CreateProcessW
CreateSymbolicLinkW
CreateThread
CreateToolhelp32Snapshot
DeleteFileW
DeleteProcThreadAttributeList
DeviceIoControl
DuplicateHandle
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetModuleHandleW
GetOverlappedResult
GetProcessId
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimePreciseAsFileTime
GetTempPathW
GetWindowsDirectoryW
HeapReAlloc
InitOnceBeginInitialize
InitOnceComplete
InitializeProcThreadAttributeList
LockFileEx
MapViewOfFile
Module32FirstW
Module32NextW
MoveFileExW
MultiByteToWideChar
ReadConsoleW
ReadFile
ReadFileEx
RemoveDirectoryW
RtlCaptureContext
RtlLookupFunctionEntry
SetCurrentDirectoryW
SetEnvironmentVariableW
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetThreadStackGuarantee
SleepEx
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
UnlockFile
UnmapViewOfFile
UpdateProcThreadAttribute
WaitForMultipleObjects
WideCharToMultiByte
WriteConsoleW
WriteFileEx
lstrlenW
FreeLibrary
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
SetThreadErrorMode
CloseHandle
GetModuleHandleA
Sleep
AddVectoredExceptionHandler
CreateEventA
CreateEventW
CreateWaitableTimerExW
GetCurrentThreadId
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
RemoveVectoredExceptionHandler
RtlVirtualUnwind
SetEvent
SetUnhandledExceptionFilter
SetWaitableTimer
TlsGetValue
TlsSetValue
WaitForMultipleObjectsEx
WaitForSingleObject
LoadLibraryExA
FormatMessageW
GetProcessHeap
HeapAlloc
HeapFree
api-ms-win-crt-environment-l1-1-0
__p__environ
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
_hypot
acosf
acos
asin
asinf
atan
atan2
atan2f
atanf
ceil
ceilf
cos
cosf
cosh
coshf
exp
exp2
exp2f
expf
floor
floorf
fma
fmaf
fmod
fmodf
hypot
log
log1p
log1pf
log2
log2f
logf
pow
powf
round
roundf
sin
sinf
sinh
sinhf
tan
tanf
tanh
tanhf
trunc
truncf
api-ms-win-crt-private-l1-1-0
memcmp
memcpy
memmove
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_fpreset
_initialize_narrow_environment
_initterm
_initterm_e
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
fflush
setvbuf
api-ms-win-crt-string-l1-1-0
memset
strlen
strncmp
wcslen
ntdll
NtCreateNamedPipeFile
NtCreateFile
NtOpenFile
NtReadFile
NtWriteFile
RtlNtStatusToDosError
dwmapi
DwmEnableBlurBehindWindow
DwmSetWindowAttribute
imm32
ImmAssociateContextEx
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionWindow
ole32
OleInitialize
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
CoInitializeEx
CoUninitialize
PropVariantClear
PropVariantCopy
StringFromIID
user32
CloseTouchInputHandle
GetActiveWindow
GetAsyncKeyState
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetRawInputData
GetRawInputDeviceInfoW
GetTouchInputInfo
MapVirtualKeyExW
MapVirtualKeyW
RegisterRawInputDevices
RegisterTouchWindow
ReleaseCapture
SendInput
SetCapture
ToUnicode
ToUnicodeEx
TrackMouseEvent
AdjustWindowRectEx
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CreateIcon
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageW
DisplayConfigGetDeviceInfo
EnableMenuItem
EnumDisplayMonitors
GetClassInfoExA
GetClientRect
GetClipCursor
GetCursorPos
GetDC
GetDisplayConfigBufferSizes
GetMenu
GetMonitorInfoW
GetSystemMenu
GetSystemMetrics
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRgn
IsIconic
IsProcessDPIAware
LoadCursorW
LoadImageW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
QueryDisplayConfig
RedrawWindow
RegisterClassExA
RegisterClassExW
RegisterWindowMessageA
ReleaseDC
ScreenToClient
SendMessageW
SetCursor
SetForegroundWindow
SetMenuDefaultItem
SetWindowDisplayAffinity
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMessage
ValidateRect
userenv
GetUserProfileDirectoryW
uxtheme
SetWindowTheme
ws2_32
GetHostNameW
WSACleanup
WSADuplicateSocketW
WSAGetLastError
WSARecv
WSASend
WSASocketW
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
getsockopt
ioctlsocket
listen
recv
recvfrom
select
send
sendto
setsockopt
shutdown
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
bcryptprimitives
ProcessPrng
combase
CoTaskMemFree
CoCreateFreeThreadedMarshaler
dxgi
CreateDXGIFactory1
gdi32
ChoosePixelFormat
CreateBitmap
CreateCompatibleBitmap
CreateRectRgn
DeleteObject
DescribePixelFormat
GetDeviceCaps
GetPixelFormat
SetBitmapBits
SetPixelFormat
SwapBuffers
mmdevapi
ActivateAudioInterfaceAsync
opengl32
wglCreateContext
wglDeleteContext
wglGetCurrentContext
wglGetProcAddress
wglMakeCurrent
propsys
PropVariantCompareEx
PropVariantToBSTR
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
shell32
DragFinish
DragQueryFileW
rpcrt4
UuidCreate
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
oleaut32
GetErrorInfo
SetErrorInfo
SysAllocStringLen
SysFreeString
SysStringLen
Name
.text
Size
12.0MB
Virtual Size
12.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
283KB
Virtual Size
283KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
746KB
Virtual Size
746KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
832B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
57KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ