Behavioral task
behavioral1
Sample
2500-132-0x0000000000530000-0x0000000000B29000-memory.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2500-132-0x0000000000530000-0x0000000000B29000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
2500-132-0x0000000000530000-0x0000000000B29000-memory.dmp
-
Size
6.0MB
-
MD5
58cce1e2c50f1cd2035868daa1183f30
-
SHA1
27c284f17d20faefc0471ae66e66156fe159a539
-
SHA256
914ac49c4a5dcbf57feb8d8f90b67379ac257fa944bb751062c0a64506932ba5
-
SHA512
41bc30f2e450e34d796c9e5e2698d71b9cb0afcdc43d15176805b174a088d6a6b27e5fd7d2dab34ceb87f8525e8fb04278318f3ef379ff37a64cf12705676269
-
SSDEEP
98304:xX+ZGhCrY9Fr8af3Cy+UsPQ4mtBuvQbmRPFWEr38QcdfQZcht/c5ilvTilNZwmMp:xuZTc9yaKy+UsPatBuYyPQEadfQZSK
Malware Config
Signatures
-
Privateloader family
Files
-
2500-132-0x0000000000530000-0x0000000000B29000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 325KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp`*0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp`*1 Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp`*2 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 64KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ