Static task
static1
Behavioral task
behavioral1
Sample
3a2a3992ff13289b02262640556daf43bbd3be64fba43e0329307b4e60d7265c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a2a3992ff13289b02262640556daf43bbd3be64fba43e0329307b4e60d7265c.exe
Resource
win10v2004-20220901-en
General
-
Target
3a2a3992ff13289b02262640556daf43bbd3be64fba43e0329307b4e60d7265c
-
Size
361KB
-
MD5
1754d4765a05e4637d2dcdbd1c28eaf1
-
SHA1
227b37d48ae4647220f632993a6c6954c62e7371
-
SHA256
3a2a3992ff13289b02262640556daf43bbd3be64fba43e0329307b4e60d7265c
-
SHA512
9ee7d9a3a7316a8014151cd280e135d85e3d26d504e5bf698ad309b20d92616bb35e20367d83c548e1144960580acbaa69bb7c9be0e1bb6acddedfa904898785
-
SSDEEP
6144:x6qq0vmHWIBQyPiD6RstlozpHs8SQKjsLxtVJsIMLFLG5lDPGauc3:sJbBZPimRsb8pHs8SQYMnsIMLFLG5lDG
Malware Config
Signatures
Files
-
3a2a3992ff13289b02262640556daf43bbd3be64fba43e0329307b4e60d7265c.exe windows x86
013c3eb9a768b7cc5e92cf3ef3fb9f67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
mlang
ConvertINetReset
netapi32
NetUseAdd
NetUseDel
NetUseEnum
NetUseGetInfo
NetUserAdd
NetUserChangePassword
NetUserDel
NetUserEnum
NetUserGetGroups
NetUserGetInfo
NetUserGetLocalGroups
NetUserModalsGet
NetUserModalsSet
NetUserSetGroups
NetUserSetInfo
NetShareAdd
NetShareCheck
NetShareDel
NetShareDelSticky
NetShareEnum
NetShareEnumSticky
NetShareGetInfo
NetShareSetInfo
NetStatisticsGet
NetGetJoinableOUs
NetGroupAdd
NetGroupAddUser
NetGroupDel
NetGroupDelUser
NetGroupEnum
NetGroupGetInfo
kernel32
MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalAlloc
SetConsoleTitleA
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA
mapi32
MAPIReadMail
MAPIResolveName
MAPISaveMail
MAPISendDocuments
Sections
.code Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 347KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r Size: - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ