Behavioral task
behavioral1
Sample
65e5799b2d95ec24ceffd9ecfc467216a1e8d41243010a59f56aa3c067960dc4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
65e5799b2d95ec24ceffd9ecfc467216a1e8d41243010a59f56aa3c067960dc4.exe
Resource
win10v2004-20220812-en
General
-
Target
65e5799b2d95ec24ceffd9ecfc467216a1e8d41243010a59f56aa3c067960dc4
-
Size
1.3MB
-
MD5
1009dd4281cfcd4625e9699747dc16f1
-
SHA1
742bcc8f68e859ccbebace932790b5bb2ae855e4
-
SHA256
65e5799b2d95ec24ceffd9ecfc467216a1e8d41243010a59f56aa3c067960dc4
-
SHA512
f5366ff56d083b99d9c4644f565d24cf050789ecc6f9ac630037dd8315064f0747f874eb5a57aad7bf9ed739cbcaa5168fec8016881d1bb370a263939f762e23
-
SSDEEP
12288:irBaZmghYn4xeI3frADTIoCFCAc0EWj7vMBAmfAr3S4B3APaN5WCz9m:iOIrgfr0TIjFCAc0EWHvMrA9B3Mwk
Malware Config
Signatures
-
Darkcomet family
Files
-
65e5799b2d95ec24ceffd9ecfc467216a1e8d41243010a59f56aa3c067960dc4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ