Behavioral task
behavioral1
Sample
e2e2638b995c947b2ca6da343fb31cf211521d6dc3404cd2c0d0faa7378fcfc2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e2e2638b995c947b2ca6da343fb31cf211521d6dc3404cd2c0d0faa7378fcfc2.exe
Resource
win10v2004-20220812-en
General
-
Target
e2e2638b995c947b2ca6da343fb31cf211521d6dc3404cd2c0d0faa7378fcfc2
-
Size
1.6MB
-
MD5
28b392934cbd88737730978170eca711
-
SHA1
f39e994e41e2fb7f118e5716ba2e46e59c862867
-
SHA256
e2e2638b995c947b2ca6da343fb31cf211521d6dc3404cd2c0d0faa7378fcfc2
-
SHA512
cb9a4f9b424be810768fecd755aba4e36fdc06eb4de209d44339253cd666b9dc41f44846fb3ee827f6a5f27bdbb9a5ca99a937299cd1cfe3527d847597a473bd
-
SSDEEP
24576:dSLKgFnqUJpR9wPF/SXVVhWg6ADiLKQDYLrGFpnujbo8EaVBUR8f+kN10EBRxQFw:d2Khw21SrhWgviLJPnWbDok30SQFOQ6
Malware Config
Signatures
-
Darkcomet family
Files
-
e2e2638b995c947b2ca6da343fb31cf211521d6dc3404cd2c0d0faa7378fcfc2.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ejtzbxgb Size: 891KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lskdqtup Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE