Static task
static1
Behavioral task
behavioral1
Sample
cfa29303ac72e7bed5dd766ecab07c715f708d40b84e56cd6cafb04c17580c92.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfa29303ac72e7bed5dd766ecab07c715f708d40b84e56cd6cafb04c17580c92.exe
Resource
win10v2004-20220901-en
General
-
Target
cfa29303ac72e7bed5dd766ecab07c715f708d40b84e56cd6cafb04c17580c92
-
Size
136KB
-
MD5
6dd841df562096e67c49c683a8404230
-
SHA1
12b7d2d25a9e5f491c921a02ccb168dad734efe4
-
SHA256
cfa29303ac72e7bed5dd766ecab07c715f708d40b84e56cd6cafb04c17580c92
-
SHA512
789d504454e31da6ac27542a5a2b5ce2a4c5c2e8bb0f918046ff63dc70713dd170be9dc3a47bd23ce12ab10aa40e8576a2d982384c8b26c6638af95515a0956f
-
SSDEEP
3072:mwOXXIBPBoESrCXPiWbewgCXplv+6tId0z9BzTbs:FOXXIBPpXRbemr1x9BzXs
Malware Config
Signatures
Files
-
cfa29303ac72e7bed5dd766ecab07c715f708d40b84e56cd6cafb04c17580c92.exe windows x86
03eec1205b7e1173c4e83c76c9a8e6a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitialize
CoUninitialize
CoCreateInstance
OleUninitialize
OleInitialize
version
VerQueryValueW
GetFileVersionInfoW
uxtheme
DrawThemeBackground
CloseThemeData
setupapi
SetupFindFirstLineW
SetupGetLineTextW
SetupFindNextLine
SetupCloseInfFile
kernel32
HeapReAlloc
SetEndOfFile
HeapSize
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
WideCharToMultiByte
GetLocaleInfoA
VirtualQuery
InterlockedExchange
RtlUnwind
LoadLibraryA
CloseHandle
ReadFile
GetFileSize
SetFilePointer
CreateFileW
DeleteCriticalSection
GetProfileStringW
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoW
GetVersionExA
GetLastError
WriteFile
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
FlushFileBuffers
CreateFileA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 753KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE