Static task
static1
Behavioral task
behavioral1
Sample
6cbda8878f68dac2b44abac3afb8727d16f8f3ab584fce113bfd1c098c7f2436.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6cbda8878f68dac2b44abac3afb8727d16f8f3ab584fce113bfd1c098c7f2436.exe
Resource
win10v2004-20220812-en
General
-
Target
6cbda8878f68dac2b44abac3afb8727d16f8f3ab584fce113bfd1c098c7f2436
-
Size
31KB
-
MD5
c5ff4757c41c6dd0a3d2dd40730ed61e
-
SHA1
8d81f341f561a85faf7ba459cce96c76f43ec968
-
SHA256
6cbda8878f68dac2b44abac3afb8727d16f8f3ab584fce113bfd1c098c7f2436
-
SHA512
1ae8e9943e7030575fc4740f9b1f47ac47cbec814e51ddfa9ef7091291ad093447e9f8495a9b52a255d6b30eb1469b9245299f5a50f078201ae33f8e340bb50d
-
SSDEEP
192:GQKdFGTDM1MZXb4yyDsPZkY//HXfffzRBSWYE7VrVq3wG:udATgy8sPZB//HXfffKWNVrVJG
Malware Config
Signatures
Files
-
6cbda8878f68dac2b44abac3afb8727d16f8f3ab584fce113bfd1c098c7f2436.exe windows x86
fd984fbd04b464190b26c346a22b87e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
msi
MsiCloseHandle
netapi32
NetUseAdd
NetUseDel
NetUseEnum
NetUseGetInfo
NetUserAdd
NetUserChangePassword
NetUserDel
NetUserEnum
NetUserGetGroups
NetUserGetInfo
NetUserGetLocalGroups
NetUserModalsGet
NetUserModalsSet
NetUserSetGroups
NetUserSetInfo
NetShareAdd
NetShareCheck
NetShareDel
NetShareDelSticky
NetShareEnum
NetShareEnumSticky
NetShareGetInfo
NetShareSetInfo
NetStatisticsGet
NetGetJoinableOUs
NetGroupAdd
NetGroupAddUser
NetGroupDel
NetGroupDelUser
NetGroupEnum
NetGroupGetInfo
kernel32
MapViewOfFileEx
GetTickCount
GetSystemDirectoryA
LocalAlloc
SetConsoleTitleW
EnumCalendarInfoA
CallNamedPipeA
ReadFile
CreateFileA
ole32
CoGetMalloc
CoGetDefaultContext
CoLoadLibrary
CoRegisterChannelHook
Sections
.code Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r Size: - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ