Behavioral task
behavioral1
Sample
e68b0c307896677e24a443c9ff62333b7134296221acae91c52dff46a060d6d9.exe
Resource
win7-20240220-en
General
-
Target
e68b0c307896677e24a443c9ff62333b7134296221acae91c52dff46a060d6d9
-
Size
1.8MB
-
MD5
1139e9039d1880aa61527aa5b7628efb
-
SHA1
b115bcdd1e5f7947843b53a33cc95a852d6b65a1
-
SHA256
e68b0c307896677e24a443c9ff62333b7134296221acae91c52dff46a060d6d9
-
SHA512
f306a0c6e59f4735a4b543fd09b2f4a27a6c83f452d55fdd08ffb51f828a9180f53afff168a82ed42fc263caecc7705c78b74d7b8b3b739a258abf403c91952f
-
SSDEEP
49152:S0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhJUttF:S0GnJMOWPClFdx6e0EALKWVTffZiPAcz
Malware Config
Signatures
Files
-
e68b0c307896677e24a443c9ff62333b7134296221acae91c52dff46a060d6d9.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ