Behavioral task
behavioral1
Sample
3276-2-0x0000000000FF0000-0x0000000001796000-memory.exe
Resource
win7-20240221-en
General
-
Target
3276-2-0x0000000000FF0000-0x0000000001796000-memory.dmp
-
Size
7.6MB
-
MD5
fea67272ef3b8c3e83329fd8db54743a
-
SHA1
32de67dffded48593723cc78fa2a783eef3ff1c5
-
SHA256
5b4e10c34e3966e667435326a1da62601249f446c0742a8f1cb1623545161df9
-
SHA512
d63ec4f00a6c1fa5161a0e66c0a29b2a5700e3bcaad7b6cc66374b2022b5fb4ccd50538cb93f8d450f98fe35b2d0ba73ea3f46f9a99ffce686fe56f85bc26d21
-
SSDEEP
98304:eFsM7fhuW6EsVFQc7qiJlR5taIXDJJrIci10TBz4CCAy/6IFY+YmdT06lT:KzfhuF1lTrI/0a9/6Icm/lT
Malware Config
Signatures
Files
-
3276-2-0x0000000000FF0000-0x0000000001796000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 526KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 66KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 22KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ