mvbFp6
Static task
static1
Behavioral task
behavioral1
Sample
84d3573747fbdf7ca822fd5a48726484c8b617e74a920dc2a68dd039b8f576fd.exe
Resource
win7-en-20211208
General
-
Target
84d3573747fbdf7ca822fd5a48726484c8b617e74a920dc2a68dd039b8f576fd
-
Size
196KB
-
MD5
482bd720d61f1ab110083d5109261895
-
SHA1
226e1002de495179b1be5db8ab4b3cca05441b4a
-
SHA256
84d3573747fbdf7ca822fd5a48726484c8b617e74a920dc2a68dd039b8f576fd
-
SHA512
cc57bc50226c79eebf723a4a523393edd4adbd1aab6ad6ebc47835439c7ea199eee9c365940f3e54f1c6e98a18cac94dac547ba39273fea3d869f79be330009c
-
SSDEEP
3072:yI4PluoOGCm2LXjJ5sm0J+JznKkajB0DkewaavJs+txxEJnXl0QgaY3+:yPtuLDXjJaWDK9BAke0sgx+XlJe3
Malware Config
Signatures
Files
-
84d3573747fbdf7ca822fd5a48726484c8b617e74a920dc2a68dd039b8f576fd.exe windows x86
b3b6676323f70e6f8a0a8616846769e9
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
pdh
PdhParseCounterPathW
PdhExpandWildCardPathHW
msvcrt
strcoll
cfgmgr32
CM_Get_HW_Prof_Flags_ExW
wininet
FindFirstUrlCacheEntryExW
InternetCanonicalizeUrlA
kernel32
EraseTape
LoadLibraryA
GetProcAddress
GetTapePosition
GetModuleFileNameA
GetLastError
TerminateThread
CloseHandle
LoadLibraryExW
SetConsoleWindowInfo
OpenSemaphoreA
HeapCompact
oleaut32
SafeArrayCreateVector
VarDecFromR8
esent
JetCommitTransaction
winspool.drv
AddPrinterW
mprapi
MprAdminInterfaceSetInfo
ole32
StgConvertVariantToProperty
gdi32
SetViewportOrgEx
RemoveFontResourceW
CreatePatternBrush
crypt32
CryptUnregisterOIDFunction
advapi32
OpenServiceW
SetNamedSecurityInfoW
shlwapi
SHRegQueryUSValueW
PathRemoveExtensionA
UrlGetLocationA
PathGetArgsW
setupapi
SetupGetSourceInfoW
SetupDiCancelDriverInfoSearch
user32
NotifyWinEvent
GetUserObjectInformationA
UnregisterClassA
MessageBoxIndirectW
CopyImage
ArrangeIconicWindows
IsCharUpperA
DialogBoxIndirectParamA
GetMenuItemInfoA
iphlpapi
GetTcpStatistics
GetNetworkParams
secur32
GetComputerObjectNameA
DeleteSecurityContext
rpcrt4
RpcBindingFromStringBindingW
Exports
Exports
Sections
.rdar Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ