Behavioral task
behavioral1
Sample
3000-0-0x0000000000FD0000-0x000000000102E000-memory.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3000-0-0x0000000000FD0000-0x000000000102E000-memory.exe
Resource
win10v2004-20240412-en
General
-
Target
3000-0-0x0000000000FD0000-0x000000000102E000-memory.dmp
-
Size
376KB
-
MD5
230277d770c660f0bfcd73a2c0268c1b
-
SHA1
8242e2c77818c23e83f77b9b4f633db0a7bfc93e
-
SHA256
9f677d2c23a25fcb8a87a6ef552adba95acb6d03e2c527832fdad0265bb931fe
-
SHA512
a804fc3d50e0d94293155be647403c9d59ab9004bd9b49f847ff144d4e2a51c97d33326165aea28c7c79595b81501ed4c8b170179408cfd74121538a97526fd1
-
SSDEEP
6144:kJIhaZe6qjW0X0evC8XJhVNaEgFn5l7usZ5LF4UUjESp:cIhaZhmFC85hVNaFFnj7F94UUlp
Malware Config
Signatures
Files
-
3000-0-0x0000000000FD0000-0x000000000102E000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 210KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ