Static task
static1
Behavioral task
behavioral1
Sample
ed07040f5bc08fecdf28db4a2c365840b7867ab705f73d08d4d64bc035caced9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ed07040f5bc08fecdf28db4a2c365840b7867ab705f73d08d4d64bc035caced9.exe
Resource
win10v2004-20221111-en
General
-
Target
ed07040f5bc08fecdf28db4a2c365840b7867ab705f73d08d4d64bc035caced9
-
Size
351KB
-
MD5
2a1a5084908d808963413ae58c19b914
-
SHA1
878c093bc30e1b8b29af5c7ae29833f9a51b8996
-
SHA256
ed07040f5bc08fecdf28db4a2c365840b7867ab705f73d08d4d64bc035caced9
-
SHA512
e93d063de8b99cbc9d349ed8e70836508156531017dd5f73621edd7f4b98422e137136ab50cc51f00a762c1c1da5822bdbbeb488590a8f9d18c996368338d7ce
-
SSDEEP
6144:Vq08L1Qq+bh1TMo4q7Cn7VXUIGv3HcEMg2RMWzD1M4jaGsTx7Xdak6uoHTwTmSU:Vqz+bLTMoFUJGv3HSx5zJMEaJTxjdd6E
Malware Config
Signatures
Files
-
ed07040f5bc08fecdf28db4a2c365840b7867ab705f73d08d4d64bc035caced9.exe windows x86
013c3eb9a768b7cc5e92cf3ef3fb9f67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
mlang
ConvertINetReset
netapi32
NetUseAdd
NetUseDel
NetUseEnum
NetUseGetInfo
NetUserAdd
NetUserChangePassword
NetUserDel
NetUserEnum
NetUserGetGroups
NetUserGetInfo
NetUserGetLocalGroups
NetUserModalsGet
NetUserModalsSet
NetUserSetGroups
NetUserSetInfo
NetShareAdd
NetShareCheck
NetShareDel
NetShareDelSticky
NetShareEnum
NetShareEnumSticky
NetShareGetInfo
NetShareSetInfo
NetStatisticsGet
NetGetJoinableOUs
NetGroupAdd
NetGroupAddUser
NetGroupDel
NetGroupDelUser
NetGroupEnum
NetGroupGetInfo
kernel32
MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalAlloc
SetConsoleTitleA
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA
mapi32
MAPIReadMail
MAPIResolveName
MAPISaveMail
MAPISendDocuments
Sections
.code Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rs Size: - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ