Behavioral task
behavioral1
Sample
1200-3-0x0000000000400000-0x0000000001A38000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1200-3-0x0000000000400000-0x0000000001A38000-memory.exe
Resource
win10v2004-20240426-en
General
-
Target
1200-3-0x0000000000400000-0x0000000001A38000-memory.dmp
-
Size
22.2MB
-
MD5
733f613c8d67a1b8863ae354a69b1d49
-
SHA1
803fb982d9d2e7969603a5e857e1d5c0bdb03462
-
SHA256
6f4379e7f204aa169da048de641c9ad9c2192f5c1009c82b941c79ce5cd3aebd
-
SHA512
73a8d9191cf6c6895078651d28bf0914634a6ec1388c6522904d4ff3e720631e60c20c3922d998fe197e2134c9721986e1704a795816155a55453ba894e173eb
-
SSDEEP
3072:y63TZcqNNrry1kYGpQ7EwaRA1kI7cEjL44fZiPR61KHby2pFTkW0/V9:y6Vxvy1NGpQgoz7PL7xivW2pFT90
Malware Config
Signatures
Files
-
1200-3-0x0000000000400000-0x0000000001A38000-memory.dmp.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ