Static task
static1
Behavioral task
behavioral1
Sample
last_stand_saber_river_tfile_ru_avi.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
last_stand_saber_river_tfile_ru_avi.exe
Resource
win10v2004-20220901-en
General
-
Target
2e5dbfbabf1e526401aabbf5140dbe71919e0b2bad6a63fd677579f7deadb7a9
-
Size
369KB
-
MD5
be0e304e677ae8994b1cfe0e50fd9f55
-
SHA1
f64d858b85dada8c3fe215c06b5d33d704099cfd
-
SHA256
2e5dbfbabf1e526401aabbf5140dbe71919e0b2bad6a63fd677579f7deadb7a9
-
SHA512
8620419e60eab74dc5d15291ac09c419e25ce227016a1f66f2da85cc2281260ff1ae109d1df331503c6b22d290acf4ed88f91a53f2184d61ad547b50c095dc3f
-
SSDEEP
6144:r0lt1Ch24d9ACewzjxhUjrvTnbx9KHKcN3Fkx8v6JAyus7/9u6QpHfX3hosErejh:mSf48jxhsVIn1Bv6iy77/NQdfHhosge1
Malware Config
Signatures
Files
-
2e5dbfbabf1e526401aabbf5140dbe71919e0b2bad6a63fd677579f7deadb7a9.zip
-
last_stand_saber_river_tfile_ru_avi.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 446KB - Virtual size: 445KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ