Static task
static1
Behavioral task
behavioral1
Sample
cfce03ee830939e20531f5e80100d2a215f14922c17cad04a74da9ed914c8cb6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cfce03ee830939e20531f5e80100d2a215f14922c17cad04a74da9ed914c8cb6.exe
Resource
win10v2004-20220901-en
General
-
Target
cfce03ee830939e20531f5e80100d2a215f14922c17cad04a74da9ed914c8cb6
-
Size
449KB
-
MD5
59faafcad1b7c8b21f79c1d974ef5a0a
-
SHA1
a29d0f560c08ebe3f31a7b382f668119408aaca5
-
SHA256
cfce03ee830939e20531f5e80100d2a215f14922c17cad04a74da9ed914c8cb6
-
SHA512
79db7d38ba30b99e9520f157fb83d4701fa65a45c6e340cb3f4c795d8739c5b0c088ea728a8e1be20c565c9456b62ed886dd8e9284530243392f90d9f024d9f0
-
SSDEEP
12288:rAt0xOX3bQOGrQDDIo3WZWjGCJAcm02Msdt4Dim88680rav19m1/:M4OXpH8+UWjNWfM1mmf6O19e
Malware Config
Signatures
Files
-
cfce03ee830939e20531f5e80100d2a215f14922c17cad04a74da9ed914c8cb6.exe windows x86
048175a50c5885c141a3de892c3425c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
GetLastError
WriteProfileStringA
SizeofResource
EnterCriticalSection
VirtualProtect
GetTimeFormatA
HeapCreate
LocalFree
DeleteAtom
CloseHandle
GetStdHandle
GlobalFree
GetACP
GlobalAddAtomA
RaiseException
FreeConsole
lstrcpyA
LoadLibraryExA
GlobalUnlock
GlobalAddAtomA
user32
GetDC
GetActiveWindow
GetParent
GetWindowTextA
EndPaint
CloseWindow
GetClassNameA
ReleaseDC
ValidateRect
BeginPaint
GetFocus
GetForegroundWindow
GetClassInfoExA
GetWindowTextLengthA
AlignRects
ShowWindow
GetWindow
DrawEdge
IsIconic
mprapi
MprAdminUserRead
MprAdminUserOpen
MprAdminUserGetInfo
MprAdminUserClose
MprAdminUserWrite
mapi32
MAPILogonEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ