Static task
static1
Behavioral task
behavioral1
Sample
sindrom_drakona_tfile_ru.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
sindrom_drakona_tfile_ru.exe
Resource
win10v2004-20220901-en
General
-
Target
387c0c261c4b3c1a5047f5a0626d5069fcffd119b4a179c002c29a1189214b55
-
Size
367KB
-
MD5
6f6792a3a8770a1bfec459b4d270dbb2
-
SHA1
03d61ea653a69ee2b8bfc5c2effb1741aec115b1
-
SHA256
387c0c261c4b3c1a5047f5a0626d5069fcffd119b4a179c002c29a1189214b55
-
SHA512
85fa5cc2b076f0804adfff958fb6157ed0798712ef61f3f943fc2e7cf2840bdcffb1453e513e26efb811cbffa2e9ffa7457573b2f05469def1de5fb1346b66d0
-
SSDEEP
6144:1jNYVox52zS49Y6wyrF8RiI77Z1tOYsTvnemEsTVvVmX98AkT5GWs:NmmwlvwTXHwYsznZ7TVvw96GWs
Malware Config
Signatures
Files
-
387c0c261c4b3c1a5047f5a0626d5069fcffd119b4a179c002c29a1189214b55.zip
-
sindrom_drakona_tfile_ru.zip.zip
-
sindrom_drakona_tfile_ru.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 446KB - Virtual size: 445KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ