Behavioral task
behavioral1
Sample
2004-11-0x0000000000110000-0x0000000000805000-memory.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2004-11-0x0000000000110000-0x0000000000805000-memory.exe
Resource
win10v2004-20240412-en
General
-
Target
2004-11-0x0000000000110000-0x0000000000805000-memory.dmp
-
Size
7.0MB
-
MD5
bace447d548280ee0dde303031eebfb1
-
SHA1
015fd44243c625ac78b8f607926fab2cb618abfa
-
SHA256
732025355255fef2d05f6b254153ed095db159d61cfe3ce286aba51a0289b08f
-
SHA512
925a45cbe1ac811525e537ec5a0f8b958a27d9a839e3b654ac356d29c8c4b567a286842f0b4fc4f9d7ba1f52222006ba5aaee415936f5a11ad4ece30342db8bb
-
SSDEEP
98304:x6plGZ0SAG7GNJSaQ8sUF7XPxLlB7sN2FCmZPa+aIRQW:xwGZKG7GNJSaQEnrCmZnaX
Malware Config
Signatures
Files
-
2004-11-0x0000000000110000-0x0000000000805000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 514KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 41KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 492KB - Virtual size: 491KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 18KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ