Static task
static1
Behavioral task
behavioral1
Sample
th_tfile_ru.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
th_tfile_ru.exe
Resource
win10v2004-20220812-en
General
-
Target
acb922d6b18ef8f58871ce3f30a1da5e30d2a5a1a5f0fe03015f70f9112a07d1
-
Size
363KB
-
MD5
84f70e70123a5ecb9f3649a2428fc7f6
-
SHA1
826325e3b23abf0334e5de21b1be695ff3f178c5
-
SHA256
acb922d6b18ef8f58871ce3f30a1da5e30d2a5a1a5f0fe03015f70f9112a07d1
-
SHA512
303305f78590cb1de5776629a075c6739fb443c0fe3f19a39b5a691b6c4e9241459021f432c8a1253ba0f1b481fe252f92b23d644116632520c369fe7753bd95
-
SSDEEP
6144:A4zZ9G5SHbM+bCXTq63jDHF8d8LVTikUfXYmcRsFm3Y25BGAglFPxP542Pkwk3:A4zZMEAWqTqk98d85ZUfX5mNPJCP9aOW
Malware Config
Signatures
Files
-
acb922d6b18ef8f58871ce3f30a1da5e30d2a5a1a5f0fe03015f70f9112a07d1.zip
-
th_tfile_ru.zip.zip
-
th_tfile_ru.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ