DrawThemeIcon
EDsXLG5116
TnawSQ839g7h
ZQdt4j
Overview
overview
10Static
static
Claim_VA43/Claim.lnk
windows7-x64
10Claim_VA43/Claim.lnk
windows10-2004-x64
10Claim_VA43...al.dll
windows7-x64
10Claim_VA43...al.dll
windows10-2004-x64
10Claim_VA43...ng.cmd
windows7-x64
1Claim_VA43...ng.cmd
windows10-2004-x64
1Claim_VA43...ll.cmd
windows7-x64
1Claim_VA43...ll.cmd
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Claim_VA43/Claim.lnk
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Claim_VA43/Claim.lnk
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
Claim_VA43/elizabeth/appeal.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Claim_VA43/elizabeth/appeal.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Claim_VA43/elizabeth/avoiding.cmd
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
Claim_VA43/elizabeth/avoiding.cmd
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
Claim_VA43/elizabeth/quill.cmd
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Claim_VA43/elizabeth/quill.cmd
Resource
win10v2004-20221111-en
Target
Claim_VA43.zip
Size
340KB
MD5
d92939cee7d6dfa2d1a81b27e77d4d29
SHA1
139982bb9f05e63acb4e2b07cf71a8dc47a289c2
SHA256
3add81df661ac839af450f5d23bb523c985d612be46cf3fee21213c12a177ea4
SHA512
87bf45c20b71d59cc25e13ed99ec93af5197e1f1e509377270ecde23dc25b4f2028e146a76c651fb27e759fc2d7f78c435c0dc6c7487a39b6efb2396b4452fc1
SSDEEP
6144:N583V7YI1mSPpeuWydPtYMb3dnooP2/zaIwcguiefFwDxFWrZe5YjEZ5JsAn8cGI:b8FBJeuWev3+yK3guQDxwe5YjEB8cGkd
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
GetCommandLineA
CreateActCtxA
ActivateActCtx
DeactivateActCtx
CreateThread
FindFirstFileA
FindNextFileA
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
CreateFileMappingA
MapViewOfFile
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
GetLastError
HeapFree
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryExW
LCMapStringW
GetStdHandle
GetFileType
GetStartupInfoW
SetLastError
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
MultiByteToWideChar
GetCPInfo
WideCharToMultiByte
IsValidCodePage
GetACP
GetOEMCP
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
ExitProcess
GetModuleHandleW
GetModuleHandleExW
GetModuleFileNameW
RaiseException
CreateFileW
WriteConsoleW
DecodePointer
HeapSize
HeapReAlloc
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
InterlockedFlushSList
FindClose
FindFirstFileExW
FindNextFileW
GetCommandLineW
GetEnvironmentStringsW
DrawThemeIcon
EDsXLG5116
TnawSQ839g7h
ZQdt4j
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ