Static task
static1
Behavioral task
behavioral1
Sample
cafefec8ed6188e21296fce53d063f379c440bdc03bb42762201b4a59fddf7f7.exe
Resource
win7-20221111-en
General
-
Target
cafefec8ed6188e21296fce53d063f379c440bdc03bb42762201b4a59fddf7f7
-
Size
261KB
-
MD5
778a6f4af0527cedc433b5eabbf7309e
-
SHA1
2e281d4acf954032382869d63f8a0423a79ace8d
-
SHA256
cafefec8ed6188e21296fce53d063f379c440bdc03bb42762201b4a59fddf7f7
-
SHA512
c591da7c09edff591bf831dff04850935fec2ccbec2392a01d7bc230f7f5c3a8a5719e0e5da1d9c2511fccaa08a58425954d8959382e58c9e5862a69f6d7a7f4
-
SSDEEP
6144:8Si2rwbHmDqJ09bq7RbrOVVvy+M4gVwoDW3HbiEwNGNT:8SzwSDqJgsRyvy+VOkwNGN
Malware Config
Signatures
Files
-
cafefec8ed6188e21296fce53d063f379c440bdc03bb42762201b4a59fddf7f7.exe windows x86
0898d10774f13ede8370f3f926c4ec26
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
newdev
UpdateDriverForPlugAndPlayDevicesW
iphlpapi
GetIpAddrTable
user32
CreateWindowExW
IsWindow
GetDlgItem
SendMessageA
DestroyWindow
EnumChildWindows
GetWindowThreadProcessId
kernel32
TlsAlloc
GetSystemTimeAsFileTime
TerminateProcess
TlsFree
TlsGetValue
GetCPInfo
AddAtomA
GetVersionExA
UnhandledExceptionFilter
GetACP
GetStartupInfoA
VirtualAlloc
GetEnvironmentStringsW
SetEndOfFile
QueryPerformanceCounter
GetCurrentProcessId
EnumResourceNamesW
GetFileType
SetHandleCount
TlsSetValue
WriteFile
GetSystemInfo
VirtualFree
HeapDestroy
lstrcatW
GetLocaleInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
IsBadWritePtr
SetLastError
HeapCreate
GetOEMCP
GetEnvironmentStrings
VirtualQuery
GetCurrentProcess
InterlockedExchange
HeapSize
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
shell32
SHGetFolderPathW
Sections
.text Size: 130KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ