Behavioral task
behavioral1
Sample
2440-67-0x0000000000400000-0x0000000000476000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2440-67-0x0000000000400000-0x0000000000476000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
2440-67-0x0000000000400000-0x0000000000476000-memory.dmp
-
Size
472KB
-
MD5
711137b7a2a3d31ccf8fae6af2c5f6a1
-
SHA1
0e1eb987fdccd254f84d99e39fe7126bd2d491d8
-
SHA256
d07e26b2fd595af2af5f012f0090661fb9e68cfdca652b6d30367af26cdc73f2
-
SHA512
5874262df12034fb7bf3734854d3faa97b22eb4d98d604d36bcfd88d922a33cbb8170be8a84f3d29795012330f145825e2478df94c3f777d13d697d4eb590530
-
SSDEEP
12288:d73uyNuB7QJc1wdxVas7Hm4X2RAndjYKkJj6GmZU3CL:q77qHm4X2RclYb6nZkCL
Malware Config
Extracted
darkcloud
- email_from
- email_to
Signatures
Files
-
2440-67-0x0000000000400000-0x0000000000476000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 251KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE