Static task
static1
Behavioral task
behavioral1
Sample
4172-132-0x0000000000060000-0x00000000000E2000-memory_unmapped_unmapped-cleaned.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4172-132-0x0000000000060000-0x00000000000E2000-memory_unmapped_unmapped-cleaned.exe
Resource
win10v2004-20221111-en
General
-
Target
4172-132-0x0000000000060000-0x00000000000E2000-memory_unmapped_unmapped-cleaned.dmp
-
Size
277KB
-
MD5
b8b2be7596b7b2548cd7b9aa68795d1e
-
SHA1
fc61531b537506369299b41f1f21dc14d051e783
-
SHA256
0666daff6b68657708f038d25ae544f5dd59aafd031524cec7be5ad86019c184
-
SHA512
5646c76efa6a3afc46cc518e6e5ee86f377b0474111d8d75c4eb3ba7f2a37fc840db81a1ecd4c39d2a80758079857c209de1c4bc8c27751e9a53e22b51531300
-
SSDEEP
6144:8dDJlc7dKWIsZr58sUM1oMqkX4au3Q3kQINNcmPCVDSU293ABw+1p:4M7lIs9
Malware Config
Signatures
Files
-
4172-132-0x0000000000060000-0x00000000000E2000-memory_unmapped_unmapped-cleaned.dmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 269KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ