Behavioral task
behavioral1
Sample
HEUR-Trojan.MSIL.Vimditator.exe
Resource
win7-20220812-en
General
-
Target
HEUR-Trojan.MSIL.Vimditator.gen-15f54e2562a9c6f51367327e9f19c11282f21a2de6687f73f0483e6fe3164973
-
Size
45KB
-
MD5
56b84fe8827326c715996ec14e2d6f05
-
SHA1
366133968ea8bef322a22a977da1b9c7aaab9559
-
SHA256
15f54e2562a9c6f51367327e9f19c11282f21a2de6687f73f0483e6fe3164973
-
SHA512
51fb9dd6372f2fc87c11e8938744c965224e6caa08a2a7db2e27f0321d7f5ce24bf02d94c2df757b22611a9332d60ed264aea90e1371cd8b155426c0d7dc399e
-
SSDEEP
768:ufC1huLCUgHh8XAQZgd7tMFoVbqw9JphG6QbnreCxjr0:RcCUgHh9QZJFHw9VGxrlxjr0
Malware Config
Extracted
xworm
system6458.ddns.net:6666
ErqZ95ULnqmJ2qTf
-
install_file
Seystem.exe
Signatures
-
Xworm family
Files
-
HEUR-Trojan.MSIL.Vimditator.gen-15f54e2562a9c6f51367327e9f19c11282f21a2de6687f73f0483e6fe3164973.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ