Static task
static1
Behavioral task
behavioral1
Sample
632-139-0x0000000007150000-0x00000000077CA000-memory.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
632-139-0x0000000007150000-0x00000000077CA000-memory.dll
Resource
win10v2004-20220812-en
General
-
Target
632-139-0x0000000007150000-0x00000000077CA000-memory.dmp
-
Size
6.5MB
-
MD5
813b5eb5de2ccb3a03a0723f8b1604de
-
SHA1
b42c1109f7e4818177273059e2aa074089c58ac0
-
SHA256
f1d9cde31d7874ba99d47da7e77be1fa949edaef2f0f2236adacd7958e7d312a
-
SHA512
d113936ccb8835fad7486762a7b52bacd4c1e0fea4aa784bbfbabbdc6d0c52bb910004ab5abe3002b311000c8b514dbd15eab10a206f70c12bf01ed85e62b00c
-
SSDEEP
24576:985YtCtkkrE5h87zY/o8+NoqATatop2FEKkIVmp2FkKkIQFvh:9+tkkrE5h87FqqAYE6k3
Malware Config
Signatures
Files
-
632-139-0x0000000007150000-0x00000000077CA000-memory.dmp.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ