Static task
static1
Behavioral task
behavioral1
Sample
cfafd91eb3ed1cf8255d23bd0a43f334cbc805d864137d1306f71c2f9e8ee82b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfafd91eb3ed1cf8255d23bd0a43f334cbc805d864137d1306f71c2f9e8ee82b.exe
Resource
win10v2004-20220812-en
General
-
Target
cfafd91eb3ed1cf8255d23bd0a43f334cbc805d864137d1306f71c2f9e8ee82b
-
Size
55KB
-
MD5
67578c9ed97b793214b0e9e18d1c8b57
-
SHA1
d612763ca1e01e44a37e58c2c1b6bcec2f27d389
-
SHA256
cfafd91eb3ed1cf8255d23bd0a43f334cbc805d864137d1306f71c2f9e8ee82b
-
SHA512
958dffc6e937de24b030cc522bba8f971a3d702df3f4b939ca32632c47e33637a2e6ad8b5cf1c7906503eb680a87f80573d5225f11b52060e8b7f3e4a539c981
-
SSDEEP
1536:/4Mrn87kkjThiGpJgf/ksAvXU/MS2tmva:AGn8PiOJgf/gvYMlx
Malware Config
Signatures
Files
-
cfafd91eb3ed1cf8255d23bd0a43f334cbc805d864137d1306f71c2f9e8ee82b.exe windows x86
aaaf39b1c1e9e619eb5c1f6f7ab9bab2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
FindClose
SetStdHandle
ResetEvent
GetModuleHandleA
ReleaseMutex
WriteFile
CreateMailslotW
GetLastError
RemoveDirectoryA
GetCommandLineA
Sleep
CreateEventW
VirtualProtectEx
WriteConsoleW
HeapFree
RemoveDirectoryA
DeleteFileA
SetLocalTime
GetFileType
lstrlenA
OpenEventA
CreateFileMappingW
SetEvent
FindClose
uxtheme
CloseThemeData
GetThemeColor
CloseThemeData
GetWindowTheme
GetThemeTextExtent
GetThemeBool
GetThemeSysSize
DrawThemeBackground
DrawThemeEdge
SetWindowTheme
OpenThemeData
GetThemeTextMetrics
IsThemeActive
cmcfg32
CMConfig
CMConfig
CMConfig
CMConfig
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ