Static task
static1
Behavioral task
behavioral1
Sample
322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99.exe
Resource
win10v2004-20220901-en
General
-
Target
322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99
-
Size
367KB
-
MD5
ded146214a283a5c58301f36553b751d
-
SHA1
e3794ad89f46ec2349f6d16604487f58e435b020
-
SHA256
322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99
-
SHA512
0eb82c4dc8b3e97f2c62c102de91405878cbc21c1b1f7799d7e023a7e00f45da0cc70eb69a863ece035695a00dd577f5bc907a546cc13dfd9f4cab298263b103
-
SSDEEP
6144:7VZwpRCPa7z+6TapPFaAa23dBCRzTVY+0GLz4MAyYf9GKa9lJjdR3GxXNY:hZu4akpPa2NBE0GLz4MAyYf9GKazJr3a
Malware Config
Signatures
Files
-
322c23e356c9d46bd42d140635f81add046d51f0dd11649995c2d7b707cb3b99.exe windows x86
43b2911c65e4710a22034db455a625a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
mlang
ConvertINetReset
netapi32
NetUseAdd
NetUseDel
NetUseEnum
NetUseGetInfo
NetUserAdd
NetUserChangePassword
NetUserDel
NetUserEnum
NetUserGetGroups
NetUserGetInfo
NetUserGetLocalGroups
NetUserModalsGet
NetUserModalsSet
NetUserSetGroups
NetUserSetInfo
NetShareAdd
NetShareCheck
NetShareDel
NetShareDelSticky
NetShareEnum
NetShareEnumSticky
NetShareGetInfo
NetShareSetInfo
NetStatisticsGet
NetGetJoinableOUs
NetGroupAdd
NetGroupAddUser
NetGroupDel
NetGroupDelUser
NetGroupEnum
NetGroupGetInfo
kernel32
MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalAlloc
SetConsoleTitleA
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA
dbghelp
FindDebugInfoFile
SearchTreeForFile
FindFileInSearchPath
FindExecutableImage
Sections
.code Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 353KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r Size: - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ