mvbFp6
Static task
static1
Behavioral task
behavioral1
Sample
fa61c3c9e2089deb3f2b40333f5ee0860177692c436c50b07eef85993a1dbfa9.exe
Resource
win7-en-20211208
General
-
Target
fa61c3c9e2089deb3f2b40333f5ee0860177692c436c50b07eef85993a1dbfa9
-
Size
212KB
-
MD5
02c1738fd59b0254264641b17e0d46d3
-
SHA1
5f598551a5ca46ebd0786bedcdd6cc82f0112442
-
SHA256
fa61c3c9e2089deb3f2b40333f5ee0860177692c436c50b07eef85993a1dbfa9
-
SHA512
c3de93d62b90c482ab11a01f1f3a3a0e97b1e902aaded10c404dcde8738ed159815a363e8755bf9a88df260ff4d88956f4c26852e87ab1c77d02eb228b29c30a
-
SSDEEP
3072:Z3qD1yYw4tJhs6NDH4I4gRtthy4qrQwIPbU/SA/7Vhk9w+dpXXl4e:YZFwgsGDYgfthVllESA/8pl4
Malware Config
Signatures
Files
-
fa61c3c9e2089deb3f2b40333f5ee0860177692c436c50b07eef85993a1dbfa9.exe windows x86
1656aa7aa811a8db1ecbc8983c084712
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cfgmgr32
CM_Get_HW_Prof_Flags_ExW
secur32
DeleteSecurityContext
GetComputerObjectNameW
iphlpapi
GetNetworkParams
GetTcpStatistics
ole32
StgConvertVariantToProperty
oleaut32
VarDecFromR8
SafeArrayCreateVector
winspool.drv
AddPrinterW
wininet
FindFirstUrlCacheEntryExW
InternetCanonicalizeUrlA
user32
CopyImage
ArrangeIconicWindows
GetMenuItemInfoA
UnregisterClassA
GetUserObjectInformationA
DialogBoxIndirectParamA
NotifyWinEvent
MessageBoxIndirectW
IsCharUpperA
crypt32
CryptUnregisterOIDFunction
mprapi
MprAdminInterfaceSetInfo
advapi32
SetNamedSecurityInfoW
OpenServiceW
kernel32
LoadLibraryExW
LoadLibraryW
SetConsoleWindowInfo
GetTapePosition
OpenSemaphoreA
TerminateThread
HeapValidate
EraseTape
GetProcAddress
GetLastError
GetModuleFileNameA
CloseHandle
msvcrt
strcoll
gdi32
CreatePatternBrush
RemoveFontResourceW
SetViewportOrgEx
rpcrt4
RpcBindingFromStringBindingW
esent
JetCommitTransaction
pdh
PdhParseCounterPathW
PdhExpandWildCardPathHA
setupapi
SetupDiCancelDriverInfoSearch
SetupGetSourceInfoW
shlwapi
SHRegQueryUSValueW
PathGetArgsW
PathRemoveExtensionA
UrlGetLocationA
Exports
Exports
Sections
.rdar Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ