Static task
static1
Behavioral task
behavioral1
Sample
Patch-IDM.6.xx/Almastba.com.url
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Patch-IDM.6.xx/Almastba.com.url
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
Patch-IDM.6.xx/Patch IDM 6.xx.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
Patch-IDM.6.xx/Patch IDM 6.xx.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
Patch-IDM.6.xx/منتديات المصطبة.url
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
Patch-IDM.6.xx/منتديات المصطبة.url
Resource
win10v2004-20221111-en
General
-
Target
55b6a09e13e54c64718e79406f98fb1ebe8e982b537bd2b8723197f744ef3d24
-
Size
507KB
-
MD5
915f97c47e5e0a6bba8524d074a1c0b8
-
SHA1
9c0f2376a6b7e644ae3d0bf77e4bd34e27d8d061
-
SHA256
55b6a09e13e54c64718e79406f98fb1ebe8e982b537bd2b8723197f744ef3d24
-
SHA512
15bb54ad4fe2d5034a0d58a29e41a00103d247b1ffe0c6e8e0af6bc241dd0e9e6dca8c38cb5c3b29b860195b6ad2035e687fbb2667de55e74dbef05b03f700e1
-
SSDEEP
12288:xj7EIN0AkgrNCsQyeBIlhTtzWyps009Gv3v5eFTgP:WU0AkgR6IlhTt/ps0ggeFTQ
Malware Config
Signatures
Files
-
55b6a09e13e54c64718e79406f98fb1ebe8e982b537bd2b8723197f744ef3d24.rar
-
Patch-IDM.6.xx/Almastba.com.url.url
-
Patch-IDM.6.xx/Patch IDM 6.xx.exe.exe windows x86
dc73a9bd8de0fd640549c85ac4089b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Sections
.text Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 573KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Patch-IDM.6.xx/منتديات المصطبة.url.url
-
Patch-IDM.6.xx/هام جدا.txt