Static task
static1
Behavioral task
behavioral1
Sample
1788_01d8e7e8beba7ea6_2a0000.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1788_01d8e7e8beba7ea6_2a0000.exe
Resource
win10v2004-20220812-en
General
-
Target
1788_01d8e7e8beba7ea6_2a0000.dmp
-
Size
212KB
-
MD5
2e0d5b54280fba654718615923aece00
-
SHA1
cb73f44ebf02deaea3a2922bad2cc2f383dfe202
-
SHA256
441cf58562c5652cedd41de9831cf8b5b077236280ac769a44f1c558a1c35549
-
SHA512
7d3082cf4b3e0089488502da5b7205c32d0594e24a2849eb81432974c07c4430a97f2b09432928e66c5367c3a5b739d3ff59c26d37b428d8afab5b9882e991ef
-
SSDEEP
3072:6rtHTIN7WXsrbiUSAY4pf7JCIaxIJlShDGbm/5uDGWqB2l7:6ZzXcrjztp7JliNum/5
Malware Config
Signatures
Files
-
1788_01d8e7e8beba7ea6_2a0000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ