Behavioral task
behavioral1
Sample
b4ef9e1a4200ed29e0aed9d90d5b4fe5e2408e2a942de4056275e1356e5ab391.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b4ef9e1a4200ed29e0aed9d90d5b4fe5e2408e2a942de4056275e1356e5ab391.exe
Resource
win10v2004-20220812-en
General
-
Target
b4ef9e1a4200ed29e0aed9d90d5b4fe5e2408e2a942de4056275e1356e5ab391
-
Size
943KB
-
MD5
7a4866e6630ea2aa4f5e8fb1e9adfcab
-
SHA1
834b213428b057d7c186c18e44240087fd625874
-
SHA256
b4ef9e1a4200ed29e0aed9d90d5b4fe5e2408e2a942de4056275e1356e5ab391
-
SHA512
3b08163767812ee5e5c97bb265a7b162cf749a49b81f0c3c8b1da82b84b115d98b8dbf40a8691f1368717dd01b90c565094314ea82c1315aa6a229663caa1ecd
-
SSDEEP
12288:M1LS8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORixlckn0:8DUKoN0bUxgGa/pfBHDb+y1HgZTcz
Malware Config
Signatures
-
Darkcomet family
Files
-
b4ef9e1a4200ed29e0aed9d90d5b4fe5e2408e2a942de4056275e1356e5ab391.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ