Behavioral task
behavioral1
Sample
ad64ae5a0e1c04501af8c782ed3602f14d34a5635f4d416d9eeafd0be195b853.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad64ae5a0e1c04501af8c782ed3602f14d34a5635f4d416d9eeafd0be195b853.exe
Resource
win10v2004-20220812-en
General
-
Target
ad64ae5a0e1c04501af8c782ed3602f14d34a5635f4d416d9eeafd0be195b853
-
Size
992KB
-
MD5
a51f17be105e49a22fcf1e5af329faf1
-
SHA1
8d06e4299cecb7adc595bf9438c92dd39ca0ced0
-
SHA256
ad64ae5a0e1c04501af8c782ed3602f14d34a5635f4d416d9eeafd0be195b853
-
SHA512
415ab9a6023b920aee6c9ce597680d2f394886275092a521f5bac80c317cca27894645151f01e0bad4ac87c3b5ce3de2a24ec0e7e84c72ad273c55516e6e1a90
-
SSDEEP
12288:taAchpWsuVtDnBsBDJIcynnC90levX4CuYf2D82T3s99+VHcNav:oAEE3uBDhynCylQgi63O9+VcNy
Malware Config
Signatures
-
Darkcomet family
Files
-
ad64ae5a0e1c04501af8c782ed3602f14d34a5635f4d416d9eeafd0be195b853.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MPRESS1 Size: 864KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE