mvbFp6
Static task
static1
Behavioral task
behavioral1
Sample
c37accc1f995cb32235edbea877813109627eca4b209f060bee357489c6bb31b.exe
Resource
win7-en-20211208
General
-
Target
c37accc1f995cb32235edbea877813109627eca4b209f060bee357489c6bb31b
-
Size
212KB
-
MD5
657790076197bbb9d1b9fc0492e3dbfd
-
SHA1
ab5d47062f7b7e80451f243080a419805392e824
-
SHA256
c37accc1f995cb32235edbea877813109627eca4b209f060bee357489c6bb31b
-
SHA512
0abbb2ebaf8393fe5aabff03582c41d63cd078dd1c3656d305b11937fe259c303b6d0fca956fd77d0816f1168f3aad0bfb82bd608246e4bfb99c3f4a405fce48
-
SSDEEP
3072:13qD1yYw4tJhs6NDH4I4gRtthy4qrQwIPNU/SA/7Vhk9w+dpXXl4e:8ZFwgsGDYgfthVllSSA/8pl4
Malware Config
Signatures
Files
-
c37accc1f995cb32235edbea877813109627eca4b209f060bee357489c6bb31b.exe windows x86
1656aa7aa811a8db1ecbc8983c084712
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cfgmgr32
CM_Get_HW_Prof_Flags_ExW
secur32
DeleteSecurityContext
GetComputerObjectNameW
iphlpapi
GetNetworkParams
GetTcpStatistics
ole32
StgConvertVariantToProperty
oleaut32
VarDecFromR8
SafeArrayCreateVector
winspool.drv
AddPrinterW
wininet
FindFirstUrlCacheEntryExW
InternetCanonicalizeUrlA
user32
CopyImage
ArrangeIconicWindows
GetMenuItemInfoA
UnregisterClassA
GetUserObjectInformationA
DialogBoxIndirectParamA
NotifyWinEvent
MessageBoxIndirectW
IsCharUpperA
crypt32
CryptUnregisterOIDFunction
mprapi
MprAdminInterfaceSetInfo
advapi32
SetNamedSecurityInfoW
OpenServiceW
kernel32
LoadLibraryExW
LoadLibraryW
SetConsoleWindowInfo
GetTapePosition
OpenSemaphoreA
TerminateThread
HeapValidate
EraseTape
GetProcAddress
GetLastError
GetModuleFileNameA
CloseHandle
msvcrt
strcoll
gdi32
CreatePatternBrush
RemoveFontResourceW
SetViewportOrgEx
rpcrt4
RpcBindingFromStringBindingW
esent
JetCommitTransaction
pdh
PdhParseCounterPathW
PdhExpandWildCardPathHA
setupapi
SetupDiCancelDriverInfoSearch
SetupGetSourceInfoW
shlwapi
SHRegQueryUSValueW
PathGetArgsW
PathRemoveExtensionA
UrlGetLocationA
Exports
Exports
Sections
.rdar Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ