Behavioral task
behavioral1
Sample
1084-0-0x0000000000310000-0x000000000042A000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1084-0-0x0000000000310000-0x000000000042A000-memory.exe
Resource
win10v2004-20240226-en
General
-
Target
1084-0-0x0000000000310000-0x000000000042A000-memory.dmp
-
Size
1.1MB
-
MD5
a7fdee57df64a67fde0d8ea7cfba446c
-
SHA1
766b0c38d46ae61e7a5c10de65e0e2efdc9bd89e
-
SHA256
634833e70148b89078d5f8f9623c363658005d8f735165d7f0ec1d0938e8a0ad
-
SHA512
c1b4694d6801f45090b8b04257293cdfe6da5b3960d01f061c860ec10e084865d6f82e8316403055e8abcc2fc6452cfc3241e346d38e9cfcff298443a16a919b
-
SSDEEP
24576:9ErIMtawhMWg0mLrDwAMguPaaHQKHw/eVk:9mk0mLrDwAIwKRVk
Malware Config
Signatures
Files
-
1084-0-0x0000000000310000-0x000000000042A000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 738KB - Virtual size: 737KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ