Behavioral task
behavioral1
Sample
736-143-0x0000000000400000-0x00000000005E8000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
736-143-0x0000000000400000-0x00000000005E8000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
736-143-0x0000000000400000-0x00000000005E8000-memory.dmp
-
Size
1.9MB
-
MD5
db9eee0a11fe9f5d55b354a32f115879
-
SHA1
15966ff1630253ca4c9eccc63f601b6a0201c7bf
-
SHA256
b690beae8c950a94c04fd86fe57d33f3b1ba0df1e9152aa30c0a6b3d228911ea
-
SHA512
5f69b003a49d454b4bb491bb61a33ebbb69685c7783f2d7a6551bd1e76c613d3b64a137b78ecbe869eff2992675b60a96388389e9b6be454a699f69ab1b4d944
-
SSDEEP
49152:zXaTqDex/I7eOGGte4eCwMYVE/rIYmHm8jDE+12ap:zXgzote8YVE/rIvHm8t12a
Malware Config
Signatures
-
Danabot family
Files
-
736-143-0x0000000000400000-0x00000000005E8000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 22KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ