Static task
static1
Behavioral task
behavioral1
Sample
845b59d43c87cedbc59743cffb58a925638c88af6da21418a519b6ee21dc74fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
845b59d43c87cedbc59743cffb58a925638c88af6da21418a519b6ee21dc74fd.exe
Resource
win10v2004-20221111-en
General
-
Target
845b59d43c87cedbc59743cffb58a925638c88af6da21418a519b6ee21dc74fd
-
Size
815KB
-
MD5
3e635ed4c6e13677276ab7f155b1918a
-
SHA1
0d8e5c5439c84f82881b7bed415b054049152f4c
-
SHA256
845b59d43c87cedbc59743cffb58a925638c88af6da21418a519b6ee21dc74fd
-
SHA512
f69528365c7ab6b71a5952708d8e341fe57918784e7bc54989530c2eda31028751a577d16a4c8ce1ec92fddfdabeba8452483bef051d13a96c2bc1e05ffed36e
-
SSDEEP
24576:21/yWuAgl/NuvDoF7ET19yKXbJeu4+SpjHzipmcz:UyWHW/NuvWETjyKXBdSZHz0R
Malware Config
Signatures
Files
-
845b59d43c87cedbc59743cffb58a925638c88af6da21418a519b6ee21dc74fd.exe windows x86
19efce513daf7e8e0812cf6913641308
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
CreateFileMappingA
GetACP
CloseHandle
HeapCreate
ExitProcess
GetModuleHandleA
CreateFileA
LocalFree
TlsGetValue
LoadLibraryExW
SleepEx
FindAtomA
GetConsoleAliasW
FindClose
LocalLock
GetLastError
Sleep
GlobalUnlock
FreeEnvironmentStringsA
user32
IsWindow
CallWindowProcA
GetIconInfo
CheckRadioButton
DrawEdge
CopyRect
FillRect
DrawFrame
GetDlgItem
GetFocus
GetDC
DispatchMessageA
DefWindowProcW
MessageBoxA
clbcatq
SetSetupOpen
GetCatalogObject
GetComputerObject
SetSetupSave
InprocServer32FromString
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ