Behavioral task
behavioral1
Sample
731990e29b6bb6b1d4717e19ac7a57bdaafd6c9c66f4573e87bc205573ed4e3f.exe
Resource
win7-20240215-en
General
-
Target
731990e29b6bb6b1d4717e19ac7a57bdaafd6c9c66f4573e87bc205573ed4e3f
-
Size
1.7MB
-
MD5
9892d659cab3aad1ae44ddc490f192e9
-
SHA1
25922b7322f50698b0516a44ee26f22dd37b2c02
-
SHA256
731990e29b6bb6b1d4717e19ac7a57bdaafd6c9c66f4573e87bc205573ed4e3f
-
SHA512
0a61e20b1fce8e0c4ed55b15f001623e97a0a081361bb4e2a5a29f99ae0281bbf456a026e7c4daea7cd8d5f44a5e3e82a8587d648fe476b1c6d3e7bb5054f9f6
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9oztFwIcuZlNvsKjSM9:GemTLkNdfE0pZav
Malware Config
Signatures
Files
-
731990e29b6bb6b1d4717e19ac7a57bdaafd6c9c66f4573e87bc205573ed4e3f.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ