Behavioral task
behavioral1
Sample
1364-56-0x0000000000400000-0x000000000062B000-memory.exe
Resource
win7-20230220-en
General
-
Target
1364-56-0x0000000000400000-0x000000000062B000-memory.dmp
-
Size
2.2MB
-
MD5
c1e9d1c74fbc03c839c1368f6ea68c77
-
SHA1
fbb7c086142fb8eabcb305c2ab583c0bb0bd35c3
-
SHA256
aa80a749d529ba876b1eec99c720a0c74a1b2483233d2bc8f09880967177966f
-
SHA512
d7f2b2d8c36ff9f4daec2a13b311f4fdcfe38886e80ce3b882f29f8ac63fa8c60a793f8c640c9fb3f2242dd85077a770511e8134bd5afce7b087d9ff6f135b23
-
SSDEEP
1536:m2GZNg39Y+S1oSL+RD8M/rkeKICRhVTUH48GY8nkj4jgvaXd:m2cS3C+S1oSL+hvrkeKtVTUgYAjgg
Malware Config
Signatures
Files
-
1364-56-0x0000000000400000-0x000000000062B000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ