Behavioral task
behavioral1
Sample
6818c984ad957239a90d680d8ef573bae17ba00220ea5fb9280c01a4a15a8a04.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6818c984ad957239a90d680d8ef573bae17ba00220ea5fb9280c01a4a15a8a04.exe
Resource
win10v2004-20220812-en
General
-
Target
6818c984ad957239a90d680d8ef573bae17ba00220ea5fb9280c01a4a15a8a04
-
Size
650KB
-
MD5
69f1212a768da873f5fa8dd5203fc6f1
-
SHA1
3369b457bcdeabcdccf78f6f17ea0a3b6dfd8c77
-
SHA256
6818c984ad957239a90d680d8ef573bae17ba00220ea5fb9280c01a4a15a8a04
-
SHA512
b91ba23c9bc1624dac88d4d9154d31eba6927c5878f5cfddb74241d9dda17d180618e3385be0bc0f5130fa1612193e4d6baa59d3df3293acdbb5eaff8b197dd5
-
SSDEEP
12288:p+mYvP6LKlR6q7EBlySSU3FkVqRDis1ZOKhWkE1nHpJnol3EhNz:p+Ty4R67lyBU3+kDdPO1HpJol38N
Malware Config
Signatures
-
Darkcomet family
Files
-
6818c984ad957239a90d680d8ef573bae17ba00220ea5fb9280c01a4a15a8a04.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 167B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ