Behavioral task
behavioral1
Sample
1704-75-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1704-75-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
1704-75-0x0000000000400000-0x000000000043A000-memory.dmp
-
Size
232KB
-
MD5
46080120e3ee1bf9a1a7e0cd13134f0d
-
SHA1
4231273db88ef2b681b3dc0aed33c4fb13431a05
-
SHA256
8670ea26494872fa042f5e3e9b3812233b8566f7c194d345fd0c07bbb7bb21a7
-
SHA512
2ea613aad820040cd1a65c2cd841ee3552929cdb42b2c38feef9f88c2698c0bcbce997c6185808846645c4ca7e3a053f54d825fa9435173e27e0b04c9847ec6e
-
SSDEEP
3072:AzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HIe:ALV6Bta6dtJmakIM5
Malware Config
Signatures
-
Nanocore family
Files
-
1704-75-0x0000000000400000-0x000000000043A000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ