Behavioral task
behavioral1
Sample
1140-4-0x0000000005430000-0x0000000005440000-memory.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
1140-4-0x0000000005430000-0x0000000005440000-memory.exe
Resource
win10v2004-20231023-en
General
-
Target
1140-4-0x0000000005430000-0x0000000005440000-memory.dmp
-
Size
64KB
-
MD5
a219989a914a45e3dbbcb61c51145ec8
-
SHA1
29bcf443b1fe50fb849899fe9b1f465ee2d36df3
-
SHA256
3410aa474cef0b3d6151138fe0bfef4907a5d562a325812dc14f19919544e12e
-
SHA512
63d0af4ccdf745bca7e55d09ba1b447319914629f3355ecf61437be7d3e272d82ce27c554e3eb12b93a998b63bbb6af97658a2959a8b8df645f7f9ecdcba1bc9
-
SSDEEP
1536:PscZcDm7VDCdC37rFWiax+4bwhxOMP8x9lANb/AR2jLodbV:PFxwi7LCIk2wdbV
Malware Config
Signatures
Files
-
1140-4-0x0000000005430000-0x0000000005440000-memory.dmp.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ