Behavioral task
behavioral1
Sample
db04e22734b479bb49e55ab362f1a1c0378d7952ff7b6e3fe7916a11c3e6c84f_dump_0x00090000.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db04e22734b479bb49e55ab362f1a1c0378d7952ff7b6e3fe7916a11c3e6c84f_dump_0x00090000.exe
Resource
win10v2004-20220812-en
General
-
Target
db04e22734b479bb49e55ab362f1a1c0378d7952ff7b6e3fe7916a11c3e6c84f_dump_0x00090000
-
Size
72KB
-
MD5
403a1b4a116e6042bf19ab6eb68d8ceb
-
SHA1
84955f9a19b290fc4cdfff542c45907155dd47ab
-
SHA256
deffde2b1c16051369c8f1e489830e2ccfbe35c9d26f80c7d84fae9a244796b4
-
SHA512
e291cc50af747f0b7967c33747e14dc8abf0a1374c2827ec8341b140cd93217547d12fd9097281f296d53d783adf853d1ac319076feff902b042dfaef13c1728
-
SSDEEP
1536:J4SRsHX0dnj7TOggSHQqEhONt/aMCfjgwfU:Bc0dnjOg38ONt/T/w
Malware Config
Signatures
-
Tofsee family
Files
-
db04e22734b479bb49e55ab362f1a1c0378d7952ff7b6e3fe7916a11c3e6c84f_dump_0x00090000.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ