Behavioral task
behavioral1
Sample
2fb69cd6f1f442060b03d6cc6f64c2f43ded2772ca2681cf9401c21bc4aee1ef.exe
Resource
win7-20240215-en
General
-
Target
2fb69cd6f1f442060b03d6cc6f64c2f43ded2772ca2681cf9401c21bc4aee1ef
-
Size
1.6MB
-
MD5
200cabd4f35efb47dc1ebaf10ef9bc59
-
SHA1
0bba9a082109ba9df0a7a2d0a1686d0d6448c7e6
-
SHA256
2fb69cd6f1f442060b03d6cc6f64c2f43ded2772ca2681cf9401c21bc4aee1ef
-
SHA512
f53217d82777140527be75074fd9fba6defcfd72636e31bdc34726473be6088369e724f7d2e7f5787c3581a18d4ac9179dbbce7faf86c86acacde4d7b71848b0
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9oztFwI3IUCmbkJfGxbDfs:GemTLkNdfE0pZaQ
Malware Config
Signatures
Files
-
2fb69cd6f1f442060b03d6cc6f64c2f43ded2772ca2681cf9401c21bc4aee1ef.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ