Static task
static1
Behavioral task
behavioral1
Sample
odinoshka_tfile_ru_avi.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
odinoshka_tfile_ru_avi.exe
Resource
win10v2004-20220812-en
General
-
Target
27400b1e51260de6b2b435d99ec7045a7566ef451f7474845f9c798f385df7c9
-
Size
362KB
-
MD5
9951bb84f4ab5a5e746f0c1034583244
-
SHA1
c023a59f7c59d7352b8349c75c35aca48df879c4
-
SHA256
27400b1e51260de6b2b435d99ec7045a7566ef451f7474845f9c798f385df7c9
-
SHA512
60a0b3ae1121e5e677fcad5dd6e86ae4b7e4cd45b49a9332dbf4dfa79f4093162bbfd4b24279eedd7a8be900b12e8b2b402491b60cda1d72ffc95f930348964d
-
SSDEEP
6144:vaXUGxKxbHd8FXqjeFOsGCWIyBrzBwWm0b0wutBAxmbOd0CY0L22+knftrG+iUyZ:RGWbHd8FyeYsG7IcFw/QuSmbOTY32Hf2
Malware Config
Signatures
Files
-
27400b1e51260de6b2b435d99ec7045a7566ef451f7474845f9c798f385df7c9.zip
-
odinoshka_tfile_ru_avi.zip.zip
-
odinoshka_tfile_ru_avi.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ