Static task
static1
Behavioral task
behavioral1
Sample
domrabotnitsa_tfile_ru_avi.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
domrabotnitsa_tfile_ru_avi.exe
Resource
win10v2004-20221111-en
General
-
Target
af458fa6a8c1c6249d4f8e3d6074487f8aa837da9c4b122327bc79e20f2934f9
-
Size
364KB
-
MD5
60d99b12d76cf452871bcf750bf8660f
-
SHA1
0148cdce5d9d143b9735e94fe2ce9ccfcb186e98
-
SHA256
af458fa6a8c1c6249d4f8e3d6074487f8aa837da9c4b122327bc79e20f2934f9
-
SHA512
2e6c2826aaa4a32fc2bcb91c179a136c8549088d46651794a10cba347d5804076671becc978beb2af2bdfffed28261035dc23ffa4dd108f07690ccd4fdbf04d9
-
SSDEEP
6144:hnEblino34zn65DHe22xR1vm5lXFfDoA6pYo6JKisO+UL1xfVY/V8fQezQt9i15+:hEios6FHe22xR1vm5XLrR1BNY/V8fUtX
Malware Config
Signatures
Files
-
af458fa6a8c1c6249d4f8e3d6074487f8aa837da9c4b122327bc79e20f2934f9.zip
-
domrabotnitsa_tfile_ru_avi.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ