Static task
static1
Behavioral task
behavioral1
Sample
ControlCdmXfs.exe
Resource
win10v2004-20230220-en
General
-
Target
ControlCdmXfs.exe
-
Size
228KB
-
MD5
f5546d84c6c4e974b4556babc873e15a
-
SHA1
51c81ba94e9fb0b620fef5187e4488e75305a870
-
SHA256
2a180ab2b440119c1eab75332b5eea31c0065126219af05362a798e6c413aa28
-
SHA512
9a6f081f354007892e94d32e83aec33809ff0f201699493b399d75d58ac4a76f2d56e86222008e0acb84538dd3a603c104d66bbaae23f251791162dc602fd248
-
SSDEEP
3072:tmcDvturr1VUmoNMzXpbbqgPZxP35SS8qtKDHTC6:tmcLtkLUYzXpbbqghxheDHTv
Malware Config
Signatures
Files
-
ControlCdmXfs.exe.exe windows x86
67c53537b061ef78b1d00bf60699db9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msxfs
WFSFreeResult
WFSClose
WFSRegister
WFSGetInfo
WFSExecute
WFSStartUp
WFSCleanUp
WFSOpen
kernel32
GetProcAddress
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
SetEndOfFile
GetLocaleInfoW
GetPrivateProfileStringW
WritePrivateProfileStringW
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
CreateFileA
LoadLibraryA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
GetCPInfo
SetEnvironmentVariableA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CloseHandle
GetACP
GetOEMCP
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
user32
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
DestroyWindow
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
DefWindowProcW
BeginPaint
GetClientRect
DrawTextW
EndPaint
PostQuitMessage
EndDialog
LoadIconW
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ