Static task
static1
Behavioral task
behavioral1
Sample
SharpDump.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SharpDump.exe
Resource
win10v2004-20230221-en
General
-
Target
SharpDump.exe
-
Size
8KB
-
MD5
6f462c1171274230b2064b87529410ec
-
SHA1
44da10b3474d4efc280f99bc771c3f2b9478eb02
-
SHA256
3fe4582b117ab94cde2d2f323583f2e0b8acb386b2670843f34002eea6616437
-
SHA512
f323639b06e8f893904e0b55fc803181ba93694abee32983867cb37d7770a75d63e907084f179681811037909292e543dc6391e8496aebf708b40fdfa7438ac3
-
SSDEEP
96:43MqEabxaMvZ87PrMRMVla3S/T8WcGIWbHcVhNfpTPjarOKQzNt:48qEOxaMvZ87yaQ3SL8/mQNxTPjarzy
Malware Config
Signatures
Files
-
SharpDump.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ