Static task
static1
Behavioral task
behavioral1
Sample
376ae5214bbba270a4e116d744639ba2aa8526f7bc9db2c35b6a4b4060b397de.zip
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
376ae5214bbba270a4e116d744639ba2aa8526f7bc9db2c35b6a4b4060b397de.zip
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
mesto_vstrechi_izmenit_nelzya_tfile_ru.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
mesto_vstrechi_izmenit_nelzya_tfile_ru.exe
Resource
win10v2004-20221111-en
General
-
Target
376ae5214bbba270a4e116d744639ba2aa8526f7bc9db2c35b6a4b4060b397de
-
Size
367KB
-
MD5
db57dd853f7fd967ae6097cae6c35ceb
-
SHA1
841b8a9e02b9c72888e1b9b549b6082f5061f0cd
-
SHA256
376ae5214bbba270a4e116d744639ba2aa8526f7bc9db2c35b6a4b4060b397de
-
SHA512
ec90f94bc30c09f795e6f73e8ff62bf2fad701e03946fa8351dd254ba4909ee5e2b56789ad98583495768924ea08240d47491aeda6820a709d4de8836f010927
-
SSDEEP
6144:WoJVVmqLvS6S7nebbNHs5tvrnjhNsr942TwOS8AtaAQoTGamPjL2VCuVcnBsa9rP:WoJyqTS6wneR+5njhKd85daAQIjcjL2+
Malware Config
Signatures
Files
-
376ae5214bbba270a4e116d744639ba2aa8526f7bc9db2c35b6a4b4060b397de.zip .ps1
-
mesto_vstrechi_izmenit_nelzya_tfile_ru.zip.zip .ps1
-
mesto_vstrechi_izmenit_nelzya_tfile_ru.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 446KB - Virtual size: 445KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ