Behavioral task
behavioral1
Sample
d8a4fa0db5fe7977592dc61d22d447d57c3216f6ae4c652b676ed773b2cc6a2c.exe
Resource
win7-20220812-en
General
-
Target
d8a4fa0db5fe7977592dc61d22d447d57c3216f6ae4c652b676ed773b2cc6a2c
-
Size
925KB
-
MD5
8024e61c79e78b99c4b6f30ffa9d6fc0
-
SHA1
444a4d160493a1a95b9633fb097a287182773844
-
SHA256
d8a4fa0db5fe7977592dc61d22d447d57c3216f6ae4c652b676ed773b2cc6a2c
-
SHA512
300785e2bf96f8a5a056a2cf4a3bb07188f104ad4ee4259d492d9cd853f8f78914a4d853ea606f816385a12e228370711a0a8c15fba8e5c9bf6f0780821461d9
-
SSDEEP
24576:AtTKMQtCypy9IvmAro8+Ehds7ULh6fIfJ0:AREXpIchds7ULh1fJ0
Malware Config
Signatures
-
Darkcomet family
Files
-
d8a4fa0db5fe7977592dc61d22d447d57c3216f6ae4c652b676ed773b2cc6a2c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ