Static task
static1
Behavioral task
behavioral1
Sample
viktor_korolev_50_pesen_tfile_ru.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
viktor_korolev_50_pesen_tfile_ru.exe
Resource
win10v2004-20221111-en
General
-
Target
6615a78442b408a940b59f46c18e8e6db70b8a5616675613c62d69375c369518
-
Size
363KB
-
MD5
57ff904a17158381dbadbeafc5ec1fc8
-
SHA1
4b6ad7cbb666743f49ad711c6cda0856fb5a1d99
-
SHA256
6615a78442b408a940b59f46c18e8e6db70b8a5616675613c62d69375c369518
-
SHA512
703311181a6f442b473883535799db8696ca5dab6845979a7c4fa5ca3a8c0e0fee494e40d25d5e9b458885b8be6fb115a45b97b21820429bb62c536a97e787c1
-
SSDEEP
6144:B9ULumZ38xJFZ4mirwkXiCCktuj0/sxcSPJQxELSVKf9jSs+hTU9S9AK8UiqGre2:8qnxrNirwIPCkc0/sxBJQHKfAs+6PK81
Malware Config
Signatures
Files
-
6615a78442b408a940b59f46c18e8e6db70b8a5616675613c62d69375c369518.zip
-
viktor_korolev_50_pesen_tfile_ru.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ