Static task
static1
Behavioral task
behavioral1
Sample
c45564a4e568b62ca7d6690df3ac3c62b52082dd0f5fb51bb056b11a99bc937c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c45564a4e568b62ca7d6690df3ac3c62b52082dd0f5fb51bb056b11a99bc937c.exe
Resource
win10v2004-20230915-en
General
-
Target
c45564a4e568b62ca7d6690df3ac3c62b52082dd0f5fb51bb056b11a99bc937c
-
Size
8.8MB
-
MD5
79b6ea182aecd7ad8870691aedec7bc1
-
SHA1
951b9d4dfcd765b3553de5f92897ecebff8b75be
-
SHA256
c45564a4e568b62ca7d6690df3ac3c62b52082dd0f5fb51bb056b11a99bc937c
-
SHA512
62a64c0cdaba32c1d8658d7678b8e56c01af8d175b70dfa00315dfb789370dd3ef15bb3ed21a6111aa8264c297ae3110d5eb434d36ccbceb07bc2cf98a71392b
-
SSDEEP
196608:/qF3w38zcgb8AiPfOFi89ZCBJk56tvrL7/qKpNZXzV:/qFwGY7Og6ZKqGvrL7/qwR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c45564a4e568b62ca7d6690df3ac3c62b52082dd0f5fb51bb056b11a99bc937c
Files
-
c45564a4e568b62ca7d6690df3ac3c62b52082dd0f5fb51bb056b11a99bc937c.exe windows x64
5a083de115043ccf8d3b4da60d29397a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
opencv_world340
?threshold@cv@@YANAEBV_InputArray@1@AEBV_OutputArray@1@NNH@Z
kernel32
GetCurrentThreadId
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SendInput
CharUpperBuffW
gdi32
CreateCompatibleBitmap
shell32
ShellExecuteW
libcurl-x64
curl_easy_cleanup
qt6core
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
qt6gui
??1QPixmap@@UEAA@XZ
qt6widgets
?setGeometry@QBoxLayout@@UEAAXAEBVQRect@@@Z
msvcp140
?_Xinvalid_argument@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
api-ms-win-crt-stdio-l1-1-0
fclose
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-environment-l1-1-0
_putenv
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-string-l1-1-0
isalnum
api-ms-win-crt-runtime-l1-1-0
_set_app_type
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-convert-l1-1-0
strtoll
api-ms-win-crt-locale-l1-1-0
localeconv
Sections
.text Size: - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zIk Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
./gt Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e1R Size: 8.8MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ