Static task
static1
Behavioral task
behavioral1
Sample
rovwer.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
rovwer.exe
Resource
win10v2004-20220812-en
General
-
Target
rovwer.exe
-
Size
38.4MB
-
MD5
7f6bde7964c323190a8e5a54ddfe1646
-
SHA1
358f7bb03e0d743bf7a900276017c1aa7debcea5
-
SHA256
e1376d29bc25574d0779428815cb7c4dd52d04d7e55005d2b031f66eaaa12c84
-
SHA512
2e91e71cdef9e78d1c43cff06fa0120b1dfb61ec0a9e17fb9202fb1072738757aabcf05b5169425d06888f04b3a78dcca84d8fd0400a844e3bc47234261a00fb
-
SSDEEP
12288:UkxChSElpRh/Alk2ReyATGdBoSNgFKTkjmhFPry83I3LBemU41REa:UkxChSEfQk6eOozFKXFPL3I3LBvUWRL
Malware Config
Signatures
Files
-
rovwer.exe.exe windows x86
09c3e9f469b5b581f83c2e0c70d11a2c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
RegisterClassExW
advapi32
RegQueryValueExA
comctl32
InitCommonControlsEx
Sections
Size: - Virtual size: 232KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE