Static task
static1
Behavioral task
behavioral1
Sample
cf9ba937ee7caf9161b3a88e8d2f443e317d0169724188412f1dbe35d8b7c964.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cf9ba937ee7caf9161b3a88e8d2f443e317d0169724188412f1dbe35d8b7c964.exe
Resource
win10v2004-20221111-en
General
-
Target
cf9ba937ee7caf9161b3a88e8d2f443e317d0169724188412f1dbe35d8b7c964
-
Size
850KB
-
MD5
a950e01438cb234722148d7a42244c78
-
SHA1
f47231973f5e9786e1f8437bcefec7b980ee2009
-
SHA256
cf9ba937ee7caf9161b3a88e8d2f443e317d0169724188412f1dbe35d8b7c964
-
SHA512
4c36176f7028fe424e869362ac153cc1c431531c106d378d280c3f5092e4c3d53405b04d47d7346f30c6c87d720ffa4922f4b2ce72bc584c00e2a627a7e15b45
-
SSDEEP
12288:qCerSTtUCSTPLE6FmX9ONFU6Wtb4bzKmf4BaQSdE7EQHV5V5Fo92hYAqRLIA5Y3C:qxD4ftIKb6zKkzXQ7V5FhYVLnmp9QF
Malware Config
Signatures
Files
-
cf9ba937ee7caf9161b3a88e8d2f443e317d0169724188412f1dbe35d8b7c964.exe windows x86
c1fc7e8ef07beee7d195b220500aaf9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
untfs
??0NTFS_SA@@QAE@XZ
?QueryAttributeByOrdinal@NTFS_FILE_RECORD_SEGMENT@@QAEEPAVNTFS_ATTRIBUTE@@PAEKK@Z
FormatEx
??0NTFS_BOOT_FILE@@QAE@XZ
?IsDosName@NTFS_SA@@SGEPBU_FILE_NAME@@@Z
?Initialize@NTFS_BAD_CLUSTER_FILE@@QAEEPAVNTFS_MASTER_FILE_TABLE@@@Z
Format
?GetNextAttributeRecord@NTFS_FRS_STRUCTURE@@QAEPAXPBXPAVMESSAGE@@PAE@Z
?Resize@NTFS_ATTRIBUTE@@UAEEVBIG_INT@@PAVNTFS_BITMAP@@@Z
?SafeQueryAttribute@NTFS_FRS_STRUCTURE@@QAEEKPAVNTFS_ATTRIBUTE@@0@Z
?Initialize@NTFS_REFLECTED_MASTER_FILE_TABLE@@QAEEPAVNTFS_MASTER_FILE_TABLE@@@Z
?CompareFileName@NTFS_MFT_INFO@@SGEPAXKPAU_FILE_NAME@@PAG@Z
?Initialize@NTFS_FILE_RECORD_SEGMENT@@QAEEVBIG_INT@@PAVNTFS_MASTER_FILE_TABLE@@@Z
?QueryNumberOfExtents@NTFS_EXTENT_LIST@@QBEKXZ
?Initialize@NTFS_BITMAP@@QAEEVBIG_INT@@EPAVLOG_IO_DP_DRIVE@@K@Z
??0NTFS_MFT_INFO@@QAE@XZ
?QueryExtent@NTFS_EXTENT_LIST@@QBEEKPAVBIG_INT@@00@Z
?Read@NTFS_SA@@UAEEXZ
??1NTFS_FILE_RECORD_SEGMENT@@UAE@XZ
?Extend@NTFS_MASTER_FILE_TABLE@@QAEEK@Z
??0NTFS_UPCASE_TABLE@@QAE@XZ
??0NTFS_FRS_STRUCTURE@@QAE@XZ
?AddFileNameAttribute@NTFS_FILE_RECORD_SEGMENT@@QAEEPAU_FILE_NAME@@@Z
kernel32
UnregisterWaitEx
CreateFileMappingW
GetConsoleMode
WaitCommEvent
GetCurrencyFormatA
QueryDosDeviceA
GetModuleHandleExW
SetupComm
ReadProcessMemory
DnsHostnameToComputerNameW
GetHandleInformation
LocalFileTimeToFileTime
GetTimeFormatW
GlobalHandle
LoadLibraryA
BeginUpdateResourceW
GetACP
EnumDateFormatsExW
GetCommandLineA
TermsrvAppInstallMode
GetEnvironmentStringsW
GetConsoleCharType
DeleteFileA
GetDefaultCommConfigW
BackupRead
VirtualAlloc
AttachConsole
user32
GetSystemMenu
UserRegisterWowHandlers
ClipCursor
GrayStringA
GetRawInputDeviceList
SetWindowLongW
DlgDirSelectExA
GetTaskmanWindow
PtInRect
ScrollWindowEx
OpenInputDesktop
IsGUIThread
DdeCreateDataHandle
ChangeMenuW
LoadMenuW
GetLastInputInfo
IsCharAlphaW
SetMenu
GetMenuContextHelpId
GetForegroundWindow
SetMenuItemBitmaps
LoadMenuA
SetClipboardData
UserHandleGrantAccess
hhsetup
?SetExTitlePtr@CFolder@@QAEXPAVCExTitle@@@Z
?AddChildFolder@CFolder@@QAEPAV1@PBGKPAKG@Z
?MergeKeywords@CCollection@@QAEHPAD@Z
?SetId@CTitle@@QAEXPBG@Z
?SetMasterCHM@CCollection@@QAEXPBDG@Z
?SetFindMergedCHMS@CCollection@@QAEXH@Z
??1CFIFOString@@QAE@XZ
?SetMasterCHM@CCollection@@QAEXPBGG@Z
?ParseFile@CCollection@@AAEKPBD@Z
?AddLocationHistory@CTitle@@QAEKKPBG00PBVCLocation@@00H@Z
??4CFolder@@QAEAAV0@ABV0@@Z
?DeleteChildren@CCollection@@AAEXPAPAVCFolder@@@Z
?GetFirstChildFolder@CFolder@@QAEPAV1@XZ
?Save@CCollection@@QAEKXZ
?FirstLocation@CCollection@@QAEPAVCLocation@@XZ
?GetVisableRootFolder@CCollection@@QAEPAVCFolder@@XZ
?SetOrder@CFolder@@QAEXK@Z
?AddFolder@CCollection@@QAEPAVCFolder@@PBGKPAKG@Z
?SetTitle@CLocation@@QAEXPBD@Z
?GetTitle@CLocation@@QAEPADXZ
??0CFIFOString@@QAE@XZ
??1CFolder@@QAE@XZ
Sections
.text Size: 758KB - Virtual size: 758KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ