Behavioral task
behavioral1
Sample
1404-64-0x0000000000400000-0x00000000007D5000-memory.exe
Resource
win7-20220414-en
General
-
Target
1404-64-0x0000000000400000-0x00000000007D5000-memory.dmp
-
Size
3.8MB
-
MD5
5de52745b2dc2ea11f4292d50c139f9a
-
SHA1
710b1ffc8541283ba80f5a14d0934e933ee52a4d
-
SHA256
0c13135a923b9a25b31805451b8309e4dfe09b6a54913761e1a901850aaa0ed3
-
SHA512
f93a72bf64348a62d678650ebb744bb337c62d91e235cfb22b1bbd73242d93d6b160ccc12c6032e7e6a03ec04ff3434462344f45967e9126c401bfb32784dd01
-
SSDEEP
49152:rxsxCvxvCmdLKfP0xmcyTvI55aOuNUNmQdCh1nlgNw8z/nKSYkdemY:9E6Kfq3kIaOuNUNmTxlgNw8z/nKgsmY
Malware Config
Files
-
1404-64-0x0000000000400000-0x00000000007D5000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 402KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0!6fHE#e Size: 911KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE