Static task
static1
Behavioral task
behavioral1
Sample
849c8f6e0249e401d1b7378e0b0dd369d3c0aaa0d1b41ffd88ff1aac521a15b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
849c8f6e0249e401d1b7378e0b0dd369d3c0aaa0d1b41ffd88ff1aac521a15b8.exe
Resource
win10v2004-20220812-en
General
-
Target
849c8f6e0249e401d1b7378e0b0dd369d3c0aaa0d1b41ffd88ff1aac521a15b8
-
Size
371KB
-
MD5
f782ce83381a35b651dfb40e176ab889
-
SHA1
9d633530793a5f1affbd909f1468e306f834c77c
-
SHA256
849c8f6e0249e401d1b7378e0b0dd369d3c0aaa0d1b41ffd88ff1aac521a15b8
-
SHA512
15d2a3e6649b3f0c2a6e598fdfcfd421ec205b2ccd86c9499afca497d7aa2686a3c4efc34739f4b1f920e57bb5ff83ac51fb847e35d4e2066ab2ce6383f90a0d
-
SSDEEP
6144:VfgjHcRMG8KP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsft:VfKHcRMDL9/u5Wcxr8/frTzcNS0G3fDs
Malware Config
Signatures
Files
-
849c8f6e0249e401d1b7378e0b0dd369d3c0aaa0d1b41ffd88ff1aac521a15b8.exe windows x86
c7bb5e0b287d00e497cb6fa4cd7a821f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
SuspendThread
lstrlenW
GlobalFlags
LoadLibraryW
GetPrivateProfileStringA
TlsGetValue
GetEnvironmentVariableW
FindClose
GetCurrentThreadId
FindAtomA
InitializeCriticalSection
LocalFree
GetConsoleAliasA
GetDriveTypeA
ResumeThread
WriteFile
GetNumberFormatA
HeapCreate
CreateEventW
user32
SetFocus
GetClientRect
IsWindow
DispatchMessageA
CreateWindowExA
DrawStateW
GetSysColor
GetKeyboardType
DrawTextA
EndDialog
CallWindowProcW
GetClassInfoA
GetSysColor
resutils
ClusWorkerStart
ClusWorkerStart
ClusWorkerStart
ClusWorkerStart
ClusWorkerStart
clbcatq
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ