Exes_ef8c8f41c7efa0e5671cfb5f2a09b682_bin?ff1_2019-06-28_07_30.json

[*] MalFamily: ""

[*] MalScore: 0.0

[*] File Name: "Exes_ef8c8f41c7efa0e5671cfb5f2a09b682.bin?ff1"
[*] File Size: 1417244
[*] File Type: "ASCII text, with very long lines, with no line terminators"
[*] SHA256: "fdcc2ed3770ce02614f431cde223b92319eb2604159bec6698e764bd1be9a197"
[*] MD5: "ef8c8f41c7efa0e5671cfb5f2a09b682"
[*] SHA1: "c6360ecd705fbdbf596c66d831db8dddcc57c0a3"
[*] SHA512: "a2b1cced46add8e642ca4eb18a2a0a745641fb4d38ae3c4511a710064d2924b6f0336a7aa1091d3a1ae7a62006ed887635a574aa7d1e61ca92d17c9b2dd401d4"
[*] CRC32: "FF25CCCC"
[*] SSDEEP: "24576:taSK2odma0hHmNbpTpRqc7HYSHx8f82eVFQOomQfvY3:8"

[*] Process Execution: [
    "rundll32.exe"
]

[*] Signatures Detected: []

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: [
    "CicLoadWinStaWinSta0",
    "Local\\MSCTF.CtfMonitorInstMutexDefault1"
]

[*] Modified Files: []

[*] Deleted Files: []

[*] Modified Registry Keys: []

[*] Deleted Registry Keys: []

[*] DNS Communications: []

[*] Domains: []

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {}

[*] Resolved APIs: [
    "shell32.dll.OpenAs_RunDLLW",
    "uxtheme.dll.ThemeInitApiHook",
    "user32.dll.IsProcessDPIAware",
    "dwmapi.dll.DwmIsCompositionEnabled",
    "ole32.dll.CoInitializeEx",
    "cryptbase.dll.SystemFunction036",
    "shell32.dll.#102",
    "propsys.dll.#430",
    "advapi32.dll.RegOpenKeyExW",
    "advapi32.dll.RegGetValueW",
    "advapi32.dll.RegCloseKey",
    "ole32.dll.CoTaskMemFree",
    "advapi32.dll.OpenThreadToken",
    "ole32.dll.CoTaskMemAlloc",
    "comctl32.dll.InitCommonControlsEx",
    "uxtheme.dll.EnableThemeDialogTexture",
    "uxtheme.dll.OpenThemeData",
    "uxtheme.dll.GetThemeBool",
    "kernel32.dll.SortGetHandle",
    "kernel32.dll.SortCloseHandle",
    "gdi32.dll.GetLayout",
    "gdi32.dll.GdiRealizationInfo",
    "gdi32.dll.FontIsLinked",
    "advapi32.dll.RegQueryInfoKeyW",
    "gdi32.dll.GetTextFaceAliasW",
    "advapi32.dll.RegEnumValueW",
    "advapi32.dll.RegQueryValueExW",
    "gdi32.dll.GetFontAssocStatus",
    "advapi32.dll.RegQueryValueExA",
    "advapi32.dll.RegEnumKeyExW",
    "gdi32.dll.GdiIsMetaPrintDC",
    "ole32.dll.CoUninitialize",
    "ole32.dll.CoRegisterInitializeSpy",
    "ole32.dll.CoRevokeInitializeSpy",
    "uxtheme.dll.BufferedPaintInit",
    "uxtheme.dll.BufferedPaintRenderAnimation",
    "uxtheme.dll.BeginBufferedAnimation",
    "uxtheme.dll.IsThemeBackgroundPartiallyTransparent",
    "uxtheme.dll.DrawThemeParentBackground",
    "uxtheme.dll.GetThemePartSize",
    "uxtheme.dll.DrawThemeBackground",
    "uxtheme.dll.GetThemeBackgroundContentRect",
    "uxtheme.dll.DrawThemeText",
    "uxtheme.dll.EndBufferedAnimation",
    "uxtheme.dll.GetThemeTransitionDuration"
]

[*] Static Analysis: {}