Static task
static1
Behavioral task
behavioral1
Sample
farsh_tfile_ru.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
farsh_tfile_ru.exe
Resource
win10v2004-20221111-en
General
-
Target
45efc3e0372a4c7295da8fba2e3f951078c6ebe7685f3cf96e0fce9fa8515ee3
-
Size
362KB
-
MD5
781cf4e403d9dc26e4d918ef4698399e
-
SHA1
f1322680cadcfe4c6a53824516301f89226893a0
-
SHA256
45efc3e0372a4c7295da8fba2e3f951078c6ebe7685f3cf96e0fce9fa8515ee3
-
SHA512
ce99f172daa7ef8b5cdc57c93c674aa75c83e758510c0e9aed5555227c42f572ddb8560cdf925703adc3f39f32efb24b81edf0a0ed9feede941456a22807d669
-
SSDEEP
6144:7B5aVNCLnQn0rGe4KB7nX0haEDZDZMkMbo/Oa+IPyoSEKQl7ZcuHPMJ8i:GNCu0rpJEhaE5ZMkMqOgUk7tCn
Malware Config
Signatures
Files
-
45efc3e0372a4c7295da8fba2e3f951078c6ebe7685f3cf96e0fce9fa8515ee3.zip
-
farsh_tfile_ru.zip.zip
-
farsh_tfile_ru.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ