Behavioral task
behavioral1
Sample
fe7a0846add72ec1995432e4358c1fd42f70e640c11e6377f94c7be737c8bf1a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe7a0846add72ec1995432e4358c1fd42f70e640c11e6377f94c7be737c8bf1a.exe
Resource
win10v2004-20221111-en
General
-
Target
fe7a0846add72ec1995432e4358c1fd42f70e640c11e6377f94c7be737c8bf1a
-
Size
1.1MB
-
MD5
32e4a5fd90963394a1485d42bdad6646
-
SHA1
82e4a224d06b9c003947956fb5cf0fc16131d64b
-
SHA256
fe7a0846add72ec1995432e4358c1fd42f70e640c11e6377f94c7be737c8bf1a
-
SHA512
01765c5dd90c3bedaae671008a7402aaf0d0e298aabc2ceb3da6e2b67ccdd3446dd84e4314c7eb6423c36ad5cc38ea57da2d20d93e0731ec54b7685c56eb7ab5
-
SSDEEP
24576:KpYoZKEMFLHgoTzVjk8QKfvie+VVug4SCo:aoo85XR+LKS5
Malware Config
Signatures
-
Darkcomet family
Files
-
fe7a0846add72ec1995432e4358c1fd42f70e640c11e6377f94c7be737c8bf1a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE