Static task
static1
Behavioral task
behavioral1
Sample
89f6e33ad03d481b5a07f44600f09f6af01e476948606ba935ec454a779e9cdd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89f6e33ad03d481b5a07f44600f09f6af01e476948606ba935ec454a779e9cdd.exe
Resource
win10v2004-20220901-en
General
-
Target
89f6e33ad03d481b5a07f44600f09f6af01e476948606ba935ec454a779e9cdd
-
Size
814KB
-
MD5
072f733b746ac2325debbfd5c7a4c710
-
SHA1
fcf4fc0ba26f40c50062b89eb99e00a32f1d31e2
-
SHA256
89f6e33ad03d481b5a07f44600f09f6af01e476948606ba935ec454a779e9cdd
-
SHA512
8ee42b33098863885d6a25d719e29b3cda87911b56115340873d748db648b816af142f4981b2ef1097b95c5ad4c9b4687751e132d5e30c4b3b09dd2635ebf190
-
SSDEEP
12288:hiqF5LOD6BGhtFIn+vTcpkC0RSAfHObkDwtyD+3+jHcEqcqh5WNRM5D:JFQ6BGhUdkCKSAvBek1uceZD
Malware Config
Signatures
Files
-
89f6e33ad03d481b5a07f44600f09f6af01e476948606ba935ec454a779e9cdd.exe windows x86
e30c68a92015f138737657c47461262a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
FindAtomA
CreateFileA
FindClose
WaitNamedPipeA
CreateFileMappingA
GetModuleHandleA
LocalLock
LoadLibraryExA
Sleep
FreeEnvironmentStringsA
GetConsoleCP
GetACP
LocalFree
GetConsoleAliasW
ExitProcess
GlobalUnlock
TlsGetValue
CloseHandle
GetLastError
user32
CheckRadioButton
GetIconInfo
DefWindowProcW
DrawEdge
IsWindow
DrawFrame
GetDlgItem
FillRect
GetDC
CopyRect
DispatchMessageA
GetFocus
CallWindowProcA
MessageBoxA
clbcatq
GetComputerObject
SetSetupOpen
SetSetupSave
GetCatalogObject
InprocServer32FromString
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ