Behavioral task
behavioral1
Sample
2000-54-0x0000000000370000-0x0000000000E69000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2000-54-0x0000000000370000-0x0000000000E69000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
2000-54-0x0000000000370000-0x0000000000E69000-memory.dmp
-
Size
11.0MB
-
MD5
5b0d1aaa44080704b1b27f52fe3ae10d
-
SHA1
06f4abcb88ccb1554894e4792ae41b559cfc0f0a
-
SHA256
2c59aecea1105ce908d9677f7f69d8288ac3580c9dc5a6c8ede4f29fe6770f7c
-
SHA512
2a7e8f5e8ca8e290e658288cc9761696e5010e216542992308330bba605cae553a8612b5bd7da555ce724ebf98075c31b019e05bd4bd7f806098c956fd2dd481
-
SSDEEP
196608:QAa/VbYHfmRlA6Vme2yQ4za9GqaKGoyegHhz/SMOB4i9ASi4osI3jhMSN:Y/lfvV2yQKa9bdgH4lynSdoss
Malware Config
Signatures
-
Privateloader family
Files
-
2000-54-0x0000000000370000-0x0000000000E69000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp:;(� Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp:;(� Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp:;(� Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ