Static task
static1
Behavioral task
behavioral1
Sample
letniy_marafon_122_tfile_ru.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
letniy_marafon_122_tfile_ru.exe
Resource
win10v2004-20220812-en
General
-
Target
bad796751e71372bd7b3e93d7d23eba7ace929ccbe42fb481998944670da2dc5
-
Size
367KB
-
MD5
2aa5a576a834f02b92733a230c60131d
-
SHA1
36a81db6000c2908edb4c1f075ed8ecba5049a68
-
SHA256
bad796751e71372bd7b3e93d7d23eba7ace929ccbe42fb481998944670da2dc5
-
SHA512
08d383d6efd73f28f365e795b2e571087100b0b9e7a22e6a60120cd6d0d751d3e0b5883a029ee84f9176538539c58d91b824ed8c7d6bf794fc614e2c4d0f0bbd
-
SSDEEP
6144:YgF4Gch2tvc7aicA42xEJJ7YalOUEFwwMgXt6snA28Pwzs5I1e:wwce0ED7YnFTIsnj+wsd
Malware Config
Signatures
Files
-
bad796751e71372bd7b3e93d7d23eba7ace929ccbe42fb481998944670da2dc5.zip
-
letniy_marafon_122_tfile_ru.zip.zip
-
letniy_marafon_122_tfile_ru.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 446KB - Virtual size: 445KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ