Behavioral task
behavioral1
Sample
142014a5870b0a5699af704c0c618602105394f6a8bce312808ada0bb169aa78.exe
Resource
win7-20240508-en
General
-
Target
142014a5870b0a5699af704c0c618602105394f6a8bce312808ada0bb169aa78
-
Size
1.6MB
-
MD5
96a391a0bd032b2a64b163978f7f39d9
-
SHA1
4069dccc03fc8b6d397563910f92bfd4ca44566e
-
SHA256
142014a5870b0a5699af704c0c618602105394f6a8bce312808ada0bb169aa78
-
SHA512
57b4f0d0f6cef0b437f376b4d70ae1a4823f13a6501cf1a8a8ae49f12e0dd69d15d1538849c7872657dcfc8afce3326792bfe91521611abe2b1558ffb6089564
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9oztFwIHT5JbVb1PNxrrS/:GemTLkNdfE0pZaw
Malware Config
Signatures
Files
-
142014a5870b0a5699af704c0c618602105394f6a8bce312808ada0bb169aa78.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ