Behavioral task
behavioral1
Sample
940-56-0x0000000010000000-0x0000000010177000-memory.dll
Resource
win7-20221111-en
General
-
Target
940-56-0x0000000010000000-0x0000000010177000-memory.dmp
-
Size
1.5MB
-
MD5
2d31293c421369b7161ad93a29d6c9ce
-
SHA1
380d757276880be16ad4927f90ace25bb3e56578
-
SHA256
821818e91d3203811e03830420c58065c6e2ef5d1b8f71f25bfb4be671540da5
-
SHA512
feaf4bad3a792cd18dcfa0328c0161e7f427a6f38d5646ea2feb368185b8c8b5c5ed4eb2887be292acf56dc35da199c90250c62e45ebc08e2be0e5f5b0479e16
-
SSDEEP
24576:CazXgPltxX913tS4Ka8yskqoSXMmBIvgHJOKiNFHyoovI/jto:CaDgdtn13nKFyMoS8mB4gHJOJFSVvIr
Malware Config
Signatures
-
Systembc family
Files
-
940-56-0x0000000010000000-0x0000000010177000-memory.dmp.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE