Behavioral task
behavioral1
Sample
2424-0-0x0000000001250000-0x00000000012B2000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2424-0-0x0000000001250000-0x00000000012B2000-memory.exe
Resource
win10v2004-20240419-en
General
-
Target
2424-0-0x0000000001250000-0x00000000012B2000-memory.dmp
-
Size
392KB
-
MD5
89361ebca46d78255c0420684696cb57
-
SHA1
55c4158aaec34658835c3bfb1d52f0099f2767f1
-
SHA256
cc2387cac19736ca8b27236d36082523df7419997c947ff72d529b396551e7e9
-
SHA512
3dea5ec8f7ddcedd0ade542bdc5b6efbf3ec3850a4f8ecb87bbf87865276284fdff65d7b896c33a1fa927e12c6028be498675c1fada65daad9cf1203df2cc2f9
-
SSDEEP
6144:wrhB+34ctbtwTTFIHOGztAtc2DEBbAUUkFhfDs1w/u7rYjCQYpu6r:4P+34ctef2tAtjDRU7Hg1w/u7qVYp9r
Malware Config
Signatures
Files
-
2424-0-0x0000000001250000-0x00000000012B2000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Shine Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ