Static task
static1
Behavioral task
behavioral1
Sample
cf1071f0fe58f3a700a62f71a90119ab61f0db2598fba2901ec0130c0870ecd2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf1071f0fe58f3a700a62f71a90119ab61f0db2598fba2901ec0130c0870ecd2.exe
Resource
win10v2004-20220901-en
General
-
Target
cf1071f0fe58f3a700a62f71a90119ab61f0db2598fba2901ec0130c0870ecd2
-
Size
749KB
-
MD5
0982428d1462640baaef0a617374ab17
-
SHA1
86c6c27eb0dea9fca2a7986de76cab9075625441
-
SHA256
cf1071f0fe58f3a700a62f71a90119ab61f0db2598fba2901ec0130c0870ecd2
-
SHA512
71679aea9b1e0577d65c5ab7c6c256227a9b4a187de5265c2182feb187cb1d84ce008626a569385bccdccf1ddac667bd27d1db1454219f5ec548d05ba508415c
-
SSDEEP
12288:O6evrB+eEl97xxY+B2lp639iAhz1RhEEAWjBYAPbWxIVm8YN72ANsY9GqiliR:ONohvxxYtE3RzhWQYAPaNNQ5iR
Malware Config
Signatures
Files
-
cf1071f0fe58f3a700a62f71a90119ab61f0db2598fba2901ec0130c0870ecd2.exe windows x86
e0b3af70f99dc42701786b5e4fdcbc57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateMailslotW
VirtualProtectEx
OpenEventA
DeleteFileA
SetStdHandle
GetFileType
GetCommandLineA
lstrlenA
CreateEventW
ResetEvent
CreateFileMappingW
GetModuleHandleA
FindClose
ReleaseMutex
RemoveDirectoryA
RemoveDirectoryA
WriteFile
CreateDirectoryW
FindClose
SetLocalTime
WriteConsoleW
HeapFree
GetLastError
SetEvent
uxtheme
GetThemeBool
CloseThemeData
IsThemeActive
CloseThemeData
OpenThemeData
GetThemeTextExtent
GetThemeTextMetrics
GetThemeSysSize
GetWindowTheme
GetThemeColor
DrawThemeEdge
DrawThemeBackground
SetWindowTheme
cmcfg32
CMConfig
CMConfig
CMConfig
CMConfig
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ