Behavioral task
behavioral1
Sample
c603623f1acefd977663e4532189b29126fa67b28b159a4a2ef5afe964167d13.exe
Resource
win7-20220812-en
General
-
Target
c603623f1acefd977663e4532189b29126fa67b28b159a4a2ef5afe964167d13
-
Size
752KB
-
MD5
0d994341f3bbf098f913aaeaf76fdd7a
-
SHA1
8b7be83df1ab353ff61fc0b79601ae7f3199d38a
-
SHA256
c603623f1acefd977663e4532189b29126fa67b28b159a4a2ef5afe964167d13
-
SHA512
3a0dd4789935b2f1276f92985f815b2d65c8fea14275ebd166521b093d8a90ecf0b6dad619a20e5cec5e4c036a5cf9929cc0254bac01d51be8f86a06f46e2ac7
-
SSDEEP
12288:Z9AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9L3pE:fAQ6Zx9cxTmOrucTIEFSpOr
Malware Config
Signatures
-
Darkcomet family
Files
-
c603623f1acefd977663e4532189b29126fa67b28b159a4a2ef5afe964167d13.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MPRESS1 Size: 724KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE