Behavioral task
behavioral1
Sample
2368-0-0x0000000001300000-0x0000000001412000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2368-0-0x0000000001300000-0x0000000001412000-memory.exe
Resource
win10v2004-20240412-en
General
-
Target
2368-0-0x0000000001300000-0x0000000001412000-memory.dmp
-
Size
1.1MB
-
MD5
b064652eddbb469dcc7001f2d1bee532
-
SHA1
01dcc86bd45335865aec30d3e1e818decd357779
-
SHA256
333b611eed9259a8e5be622dcd27061114a1e5b0d6f805b27a7b41082b430ff5
-
SHA512
b316069142ac91e29aa854eb88a6267e65cdf711aaf9b8dd92ab3a9261024de9c484a5a044718f584252701dc0b468ec893d936cff142890363bedec28e587ce
-
SSDEEP
24576:WAMyFD2c2aDPlgzIK9JT9S9Dtd5LSp94td:EyyaDPlgzIK9QnW4td
Malware Config
Signatures
Files
-
2368-0-0x0000000001300000-0x0000000001412000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 706KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ