Static task
static1
Behavioral task
behavioral1
Sample
RFQ MV-Haian.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RFQ MV-Haian.exe
Resource
win10v2004-20220812-en
General
-
Target
RFQ MV-Haian.exe
-
Size
485KB
-
MD5
14118ff01802f541e0593c3efc0b55c4
-
SHA1
70e44e69b10a80f2a987c061febc154c5226f3bf
-
SHA256
622b22f54e4d408ed547536ee1ec8714411cefebb170d69aeb6aae8a23a22233
-
SHA512
c0123827bc905c39692286931836fa9d076264d56a1bf3c761ef63e670802b1a050c76e61e44780bf55b98635a82c2f7d696fa42e02137050b801a9e7bc0c076
-
SSDEEP
12288:qWO+CpbKbfqFEtigKKyBG3qoS2xTSZRncT5S:qWIbKjthKep/NSZRcT
Malware Config
Signatures
Files
-
RFQ MV-Haian.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 479KB - Virtual size: 478KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ