mvbFp6
Static task
static1
Behavioral task
behavioral1
Sample
cc33c8c4eb3588fdd48ddb081f77040283c2f6b8c37777f8202b858b64a5952b.exe
Resource
win7-en-20211208
General
-
Target
cc33c8c4eb3588fdd48ddb081f77040283c2f6b8c37777f8202b858b64a5952b
-
Size
196KB
-
MD5
b759fc4229903b3226101c9c172f8efe
-
SHA1
765cea066cee8cf291857d6ac75052948727ab51
-
SHA256
cc33c8c4eb3588fdd48ddb081f77040283c2f6b8c37777f8202b858b64a5952b
-
SHA512
0c100a342b1a2841e56e36adc257f3273890f87e83902c755eadc3b9d100fd48f2f63341cf9a487258eeef89cccd9858fb97feda4d09c05e3718a9b5e8b50b13
-
SSDEEP
6144:UqWuU/QvBeWgUCFWK9oL5ipw99NaML6Ez:hoQRQF7+cyvN8
Malware Config
Signatures
Files
-
cc33c8c4eb3588fdd48ddb081f77040283c2f6b8c37777f8202b858b64a5952b.exe windows x86
138d7cf0cff2a37eaef02b9f85e3c81b
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
secur32
DeleteSecurityContext
GetComputerObjectNameA
shlwapi
PathRemoveExtensionA
PathGetArgsW
SHRegQueryUSValueW
UrlGetLocationW
rpcrt4
RpcBindingFromStringBindingW
esent
JetCommitTransaction
cfgmgr32
CM_Get_HW_Prof_Flags_ExW
iphlpapi
GetNetworkParams
GetTcpStatistics
setupapi
SetupDiCancelDriverInfoSearch
SetupGetSourceInfoW
winspool.drv
AddPrinterW
wininet
FindFirstUrlCacheEntryExW
InternetCanonicalizeUrlA
mprapi
MprAdminInterfaceSetInfo
pdh
PdhParseCounterPathW
PdhExpandWildCardPathHW
ole32
StgConvertVariantToProperty
oleaut32
VarDecFromR8
SafeArrayCreateVector
crypt32
CryptUnregisterOIDFunction
kernel32
GetTapePosition
CloseHandle
OpenSemaphoreA
TerminateThread
SetConsoleWindowInfo
EraseTape
HeapCompact
GetProcAddress
LoadLibraryExW
LoadLibraryA
GetLastError
GetModuleFileNameA
msvcrt
strcoll
gdi32
SetViewportOrgEx
FlattenPath
RemoveFontResourceW
CreatePatternBrush
user32
IsCharUpperA
GetUserObjectInformationA
DialogBoxIndirectParamA
ArrangeIconicWindows
CopyImage
GetMenuItemInfoA
NotifyWinEvent
UnregisterClassA
MessageBoxIndirectW
advapi32
SetNamedSecurityInfoW
OpenServiceW
Exports
Exports
Sections
.rdar Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ