Static task
static1
Behavioral task
behavioral1
Sample
cffab2a790ec4355ac92b5e99892292b9af1bccf314ed1849fdbcdf138ce6ef8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cffab2a790ec4355ac92b5e99892292b9af1bccf314ed1849fdbcdf138ce6ef8.exe
Resource
win10v2004-20221111-en
General
-
Target
cffab2a790ec4355ac92b5e99892292b9af1bccf314ed1849fdbcdf138ce6ef8
-
Size
746KB
-
MD5
96ddd9fbdd0f8059eae499a224cdd4c5
-
SHA1
4e940ae2a76dab9f6b0f7e6cadc7fc4adcdfb3ab
-
SHA256
cffab2a790ec4355ac92b5e99892292b9af1bccf314ed1849fdbcdf138ce6ef8
-
SHA512
15222e840b6109c4bdfc6436ccd6d755fa274f2fefb15ae8a05fdd6065ec83c23f22b1128a126a38d3b242f09e7546e7dbe21f32cbb8c7430c46c51aeb9601ee
-
SSDEEP
12288:WshH2YzzAX9KLqICQzzlnpOLkWFbhAlf/4gAF/8YgIFUkm7yZ8uQPjyluJE1BnWQ:W2H5z0KOIC2lnCkWPAOltFr2Uv/O0rV
Malware Config
Signatures
Files
-
cffab2a790ec4355ac92b5e99892292b9af1bccf314ed1849fdbcdf138ce6ef8.exe windows x86
e05e99703cb4568f3d6e3d07c95bf5aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetFileType
ReadFile
lstrlenA
FindClose
CloseHandle
WaitForMultipleObjects
GetCommandLineA
EnterCriticalSection
GetFileAttributesA
IsBadReadPtr
GetCurrentDirectoryW
SetFileAttributesW
GetFileTime
FindVolumeClose
MapViewOfFile
GetCommandLineW
ExitThread
HeapFree
LocalSize
GetDriveTypeA
GetEnvironmentVariableW
FindVolumeClose
GetModuleHandleA
GlobalLock
uxtheme
GetThemeBool
DrawThemeEdge
DrawThemeBackground
GetThemeEnumValue
GetThemeTextMetrics
IsThemeActive
SetWindowTheme
GetWindowTheme
OpenThemeData
GetThemeTextExtent
CloseThemeData
CloseThemeData
GetThemeColor
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE