Behavioral task
behavioral1
Sample
607eb467ef6e834a8366a2a527c613be3d622009386efc8db4d3c8d681f9ec54.exe
Resource
win7-20220901-en
General
-
Target
607eb467ef6e834a8366a2a527c613be3d622009386efc8db4d3c8d681f9ec54
-
Size
1.3MB
-
MD5
3a20ffbaf9fddfb527f74ed96a4ca176
-
SHA1
6d87b0f9203cb35b9ca58dc62fcf9cae629ff278
-
SHA256
607eb467ef6e834a8366a2a527c613be3d622009386efc8db4d3c8d681f9ec54
-
SHA512
d909f02f924114e005dea6e97ce0aa03601088c382e908f6b2a2614f400b4814c5fd5f0067cd861be4657f8ba242efb72f5e39a774d38937f8062e7a7278454c
-
SSDEEP
24576:iUgmtM/j14VJyTKMQtCypy9IvmAro8+Ehds7ULh6d:iUg5CsEXpIchds7ULhC
Malware Config
Signatures
-
Darkcomet family
Files
-
607eb467ef6e834a8366a2a527c613be3d622009386efc8db4d3c8d681f9ec54.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ