Static task
static1
Behavioral task
behavioral1
Sample
34 рекламные материалы, тз .exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34 рекламные материалы, тз .exe
Resource
win10v2004-20220812-en
General
-
Target
a4pr_Рекламные матереалы34.rar
-
Size
6.0MB
-
MD5
ae12d6adbe05fbebfe3c5b5a505fdc57
-
SHA1
a04d79a9894490f4f410b63edbdf8c5e24b38a72
-
SHA256
7c1eb990bf6a1ff00077e1a0bc1dcb01f6494a07686b0c14f46c2ae47863e943
-
SHA512
e4796be52de67470852ec4403726410a9a85c3008e98f63de52b171b9ded01c507e388ae47545ed7b233bc832b75d3f45240baf2f3ea69bc2bfce90e73f6dd49
-
SSDEEP
98304:kZ3w3qix+8ElhwXqt1a1XEM8vRWdMGs+I3oWXEL4iAaiuwNlv7/OUWCi:TqHHwXqna1UdXb+I3oWXw2aint7GUWD
Malware Config
Signatures
Files
-
a4pr_Рекламные матереалы34.rar.rar
-
34 рекламные материалы, тз .exe.exe windows x64
f6cf40390f24a87f9740ecc5017bc29b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ShowWindow
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
*WXRF&$# Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Q%J^KEAD Size: 205KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L$L*_QHM Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Q)J^FMYV Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BJA&S%B( Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
C%VE*AQA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
^EY^Z(QE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S(BAT_SS Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QWT#%#WT Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
M#D$_C%O Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TRUD_*NC Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
&(BOTJR( Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Заставка .jpg.jpg
-
для пользователей.txt