Static task
static1
Behavioral task
behavioral1
Sample
cf6d9ed4b9e7684965ba4df214517c59879b654bbd22e1c1bbff2b53c5075121.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cf6d9ed4b9e7684965ba4df214517c59879b654bbd22e1c1bbff2b53c5075121.exe
Resource
win10v2004-20220812-en
General
-
Target
cf6d9ed4b9e7684965ba4df214517c59879b654bbd22e1c1bbff2b53c5075121
-
Size
58KB
-
MD5
250a13739eba5702efa01d1bf80b3906
-
SHA1
fbaa4b3ed288b5aca9f0f5243729b861ac1326f0
-
SHA256
cf6d9ed4b9e7684965ba4df214517c59879b654bbd22e1c1bbff2b53c5075121
-
SHA512
835a3a1b1a42da86bb346c7b6432d9aafa5764cd1a66f1ea41a887c52159a3505fba42da9df2e32dd85bcf3c4c42f1854c352bdd4dcb0fe75d15aa132cf13512
-
SSDEEP
1536:S/mWX6bd4hHxX1tUMXIEwErgOXvUqRCu5IoZSAzcwf3MveTdXM2acRsU9FaOD:S/abd4hHxbI7ErfXvUm5IoZSAzcwf3M
Malware Config
Signatures
Files
-
cf6d9ed4b9e7684965ba4df214517c59879b654bbd22e1c1bbff2b53c5075121.exe windows x86
3a14c2e9bf3400e290f3d45bb1486a8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBrushIndirect
CreateColorSpaceA
CreateColorSpaceW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
odbc32
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
onex
OneXAddEapAttributes
OneXAddTLV
msvcrt
fread
fopen
icm32
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMCheckColors
CMCheckColorsInGamut
CMGetNamedProfileInfo
CMCreateTransformExtW
CMCreateTransformExt
CMCreateProfile
kernel32
QueryDosDeviceA
GetVersionExW
ReadConsoleA
EnumCalendarInfoW
GetACP
LocalFlags
LockResource
LocalCompact
GetWindowsDirectoryA
perfctrs
CloseDhcpPerformanceData
imm32
ImmEscapeA
mscms
AssociateColorProfileWithDeviceA
AssociateColorProfileWithDeviceW
CheckBitmapBits
CheckColors
CloseColorProfile
ConvertColorNameToIndex
ConvertIndexToColorName
CreateColorTransformA
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceA
CreateProfileFromLogColorSpaceW
DeleteColorTransform
AssociateColorProfileWithDeviceA
AssociateColorProfileWithDeviceW
CheckBitmapBits
CheckColors
CloseColorProfile
ConvertColorNameToIndex
ConvertIndexToColorName
CreateColorTransformA
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceA
CreateProfileFromLogColorSpaceW
DeleteColorTransform
aclui
CreateSecurityPage
EditSecurity
msdart
??1CCritSec@@QAE@XZ
??1CCritSec@@QAE@XZ
Sections
.code Size: 2KB - Virtual size: 10KB
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 496B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE