mvbFp6
Static task
static1
Behavioral task
behavioral1
Sample
b5b71c61a29f80c667772f5d008789816e0c7a53193536fc660a6f72009b23de.exe
Resource
win7-en-20211208
General
-
Target
b5b71c61a29f80c667772f5d008789816e0c7a53193536fc660a6f72009b23de
-
Size
208KB
-
MD5
d5c5ea1d436275aabfe0627c3db55243
-
SHA1
24cbe40ffc34984ed6ce2a3304efde961fadaba0
-
SHA256
b5b71c61a29f80c667772f5d008789816e0c7a53193536fc660a6f72009b23de
-
SHA512
d4937b6dc812bb6c52bace95d8a18d1100bdc74d6db5385a3fa0cfc156ae315d49c4e71d4e5fa1355cba15a54c17b1c14e2f70f7aef302abcdc7500cded8e021
-
SSDEEP
3072:05o9mQOTS8MwANXAGAE3BXdLszLA1a6KepCKPOlScaUZg6w8MIUlfCAZIKxy:05ouTSXb3twgyepCK3cnrweEf
Malware Config
Signatures
Files
-
b5b71c61a29f80c667772f5d008789816e0c7a53193536fc660a6f72009b23de.exe windows x86
fcaa5d9c54a57cf14001d5d77e71384e
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
secur32
GetComputerObjectNameW
DeleteSecurityContext
mprapi
MprAdminInterfaceSetInfo
kernel32
CloseHandle
GetLastError
GetModuleFileNameA
LoadLibraryExW
GetTapePosition
OpenSemaphoreA
EraseTape
LoadLibraryW
TerminateThread
GetProcAddress
SetConsoleWindowInfo
HeapValidate
iphlpapi
GetNetworkParams
GetTcpStatistics
pdh
PdhExpandWildCardPathHA
PdhParseCounterPathW
oleaut32
SafeArrayCreateVector
VarDecFromR8
shlwapi
SHRegQueryUSValueW
PathGetArgsW
PathRemoveExtensionA
UrlGetLocationA
wininet
InternetCanonicalizeUrlW
FindFirstUrlCacheEntryExW
gdi32
CreatePatternBrush
RemoveFontResourceW
SetViewportOrgEx
user32
GetMenuItemInfoA
CopyImage
DialogBoxIndirectParamA
ArrangeIconicWindows
NotifyWinEvent
MessageBoxIndirectW
UnregisterClassA
IsCharUpperA
GetUserObjectInformationA
crypt32
CryptUnregisterOIDFunction
esent
JetCommitTransaction
msvcrt
strcoll
advapi32
SetNamedSecurityInfoW
OpenServiceA
cfgmgr32
CM_Get_HW_Prof_Flags_ExW
rpcrt4
RpcBindingFromStringBindingW
winspool.drv
AddPrinterW
ole32
StgConvertVariantToProperty
setupapi
SetupDiCancelDriverInfoSearch
SetupGetSourceInfoW
Exports
Exports
Sections
.rdar Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ