Behavioral task
behavioral1
Sample
bae369a12b17a6664aae32f4127b0dc7db1edcaeb84d363f43cc1beaa20d22d9.exe
Resource
win7-20240419-en
General
-
Target
bae369a12b17a6664aae32f4127b0dc7db1edcaeb84d363f43cc1beaa20d22d9
-
Size
1.6MB
-
MD5
1ac78a4f1d3b0787104415179adf3642
-
SHA1
2eef2e1ecdafc56b1408f524cee1ce86a9f49a18
-
SHA256
bae369a12b17a6664aae32f4127b0dc7db1edcaeb84d363f43cc1beaa20d22d9
-
SHA512
b971a11e5f33fd42ba343d48be4a8a19b9c81569812e48db4171e44590ee82e7231980b72903b0878b74b5ed786ed5ec1b3f2c48b9d37dd297c62ddfb41a4df2
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9oztFwI3IUCmbkJaQQt/Km:GemTLkNdfE0pZaV
Malware Config
Signatures
Files
-
bae369a12b17a6664aae32f4127b0dc7db1edcaeb84d363f43cc1beaa20d22d9.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ