Static task
static1
Behavioral task
behavioral1
Sample
85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6.exe
Resource
win10v2004-20221111-en
General
-
Target
85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6
-
Size
393KB
-
MD5
a1430abaeeb9fdeb78bd7973428ff85c
-
SHA1
85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6
-
SHA256
38d32fb14dfa820d4109d4ddeba8a95d971e7382a7a42229331a18da2e4eaac1
-
SHA512
00034d1537c5f38faaacf000d0545de828c9e0bbbb94ccac34480dd7b473e297f29c4717c98d212401b26fe697028d68e4fd9e6d95f785b925ede35abade9c81
-
SSDEEP
6144:U5j+7bo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnjNqEu:UA7bQnhxUUSbuGFehOsuC8XmklbB/u
Malware Config
Signatures
Files
-
85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6.exe windows x86
93d48a3d2d56cdef0984f73047cf9271
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExW
SleepEx
ExitProcess
GetLastError
LocalLock
FindAtomA
FreeEnvironmentStringsA
GetModuleHandleA
GetConsoleCP
LocalFree
HeapCreate
GetACP
TlsGetValue
CreateFileMappingA
FindClose
Sleep
GetConsoleAliasW
CloseHandle
CreateFileA
GlobalUnlock
user32
IsWindow
DefWindowProcW
CallWindowProcA
GetDC
FillRect
CheckRadioButton
DrawFrame
DispatchMessageA
CopyRect
DrawEdge
GetFocus
GetIconInfo
GetDlgItem
MessageBoxA
clbcatq
GetComputerObject
SetSetupOpen
InprocServer32FromString
GetCatalogObject
SetSetupSave
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ