Static task
static1
Behavioral task
behavioral1
Sample
take_arms_bot_war_tfile_ru.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
take_arms_bot_war_tfile_ru.exe
Resource
win10v2004-20220901-en
General
-
Target
0d62de56654588706543c35219e511310e629207fef01fae5f743583446dd256
-
Size
363KB
-
MD5
039b2ace0d97dd04c431455b714ddca0
-
SHA1
fb2c7c6c25807f8b897a5992666cc210b83badff
-
SHA256
0d62de56654588706543c35219e511310e629207fef01fae5f743583446dd256
-
SHA512
ec631e2b2a9da47909336a6a26dca9785266ca3ba8e9e671eb822974338aeb7cfc21c9a651defb56f44e7a302bed7b5933d0773616ab81f1a6e9014723618ec6
-
SSDEEP
6144:UW2QQFXMY4y/zAOXyChq7CH64xvyfiDidiuOOP0qeBEiheCdDXW0Vd+326BAhMum:UWJQeFMUjwSWvbidYOP0buihFdjW0asm
Malware Config
Signatures
Files
-
0d62de56654588706543c35219e511310e629207fef01fae5f743583446dd256.zip
-
take_arms_bot_war_tfile_ru.zip.zip
-
take_arms_bot_war_tfile_ru.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ