Static task
static1
Behavioral task
behavioral1
Sample
ControlCoinXfs.exe
Resource
win10v2004-20230220-en
General
-
Target
ControlCoinXfs.exe
-
Size
220KB
-
MD5
d5d6fd384de9fb23b3a65efeadac7e21
-
SHA1
d075dd37f436b5d6d9353ccb25dfdd5b875b0567
-
SHA256
9feea4b7a5b438335353bb4eac82f8f2a16232a90b7cddbf77dc73dd451e9a6e
-
SHA512
92af7211f43abdb2ddc69d1c4ebfbe116e053969558c9a7b2f00c2bcedabb6fcefebdf0b38f6cb1b1e32e42af239ef99c7464688eb0a7bb3759336950dce8cb0
-
SSDEEP
3072:2o2lAj6EgYozvG/31SJj8CkbyZwLnL0oqtyFpO:2ojjoe/ejbkbyaf5FpO
Malware Config
Signatures
Files
-
ControlCoinXfs.exe.exe windows x86
Password: wm2@E:n+lR
9ecfd0723582adb9edfa9c14c16f8822
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msxfs
WFSFreeResult
WFSClose
WFSRegister
WFSGetInfo
WFSExecute
WFSStartUp
WFSCleanUp
WFSOpen
kernel32
GetProcAddress
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetPrivateProfileStringW
WritePrivateProfileStringW
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
GetCPInfo
SetEnvironmentVariableA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CloseHandle
GetACP
GetOEMCP
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
user32
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
DestroyWindow
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
DefWindowProcW
BeginPaint
GetClientRect
DrawTextW
EndPaint
PostQuitMessage
EndDialog
LoadIconW
Sections
.text Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ