2024-06-01_3d24dd646335edc6ed91d7c4ed36d86c_darkside

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_3d24dd646335edc6ed91d7c4ed36d86c_darkside
Size

268KB
MD5

3d24dd646335edc6ed91d7c4ed36d86c
SHA1

fcaeba635144eec760ad0a4f120517928ce58727
SHA256

55301bf3e358a123c2a1cbc98a9a1de9e239c1bcbd8e39b3972e93d5037e7b45
SHA512

e3cf4f83b4b160c159d3e27195859dce7c0e16e4682e9133a06a811ef7ec82526ae7cc23dedbf2024c9683c0edb1979d995db847674dc2e2248381b68cfeda0c
SSDEEP

3072:6qJogYkcSNm9VT05NoSUhIhI8YoXXV/IkSJeA5XyEOlGZrmW+IANL:6q2kc4m99Sy1oHFIMApy2rY/L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_3d24dd646335edc6ed91d7c4ed36d86c_darkside

Files

2024-06-01_3d24dd646335edc6ed91d7c4ed36d86c_darkside
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size:

IMAGE_SCN_MEM_READ

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�?�l�;�^
Size: 1424.2MB - Virtual size: 3422.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 3276.8MB - Virtual size: 3276.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

ȋMu�E
Size: 2238.1MB - Virtual size: 1470.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3134.1MB - Virtual size: 527.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

W�M�u�
Size: 4088.7MB - Virtual size: 2639.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��@�3�f
Size: 8.0MB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�f��SQj
Size: 3081.3MB - Virtual size: 3962.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��
Size: 1439.7MB - Virtual size: 1868.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Í@
Size: 1.6MB - Virtual size: 4090.4MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

<�
Size: - Virtual size: 4096.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�f��
Size: 196.3MB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�U�u�3
Size: 333B - Virtual size: 3.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�А��u�
Size: 4.0MB - Virtual size: 1445.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Arf��Zw
Size: 12KB - Virtual size: 3208.2MB

IMAGE_SCN_MEM_WRITE

M
Size: 1429.6MB - Virtual size: 2137.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

f��u��
Size: 140.1MB - Virtual size: 3886.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

H��
Size: 4.0MB - Virtual size: 1455.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��u��
Size: 60.0MB - Virtual size: 1644.0MB

IMAGE_SCN_MEM_DISCARDABLE

ؐO�u��
Size: 3363.2MB - Virtual size: 1152.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

��u��
Size: 1532.1MB - Virtual size: 1792.8MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

VW��
Size: 2735.2MB - Virtual size: 2970.7MB

�4��
Size: 2970.7MB - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�й
Size: 4074.7MB - Virtual size: 2970.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��u�
Size: 2007.3MB - Virtual size: 2959.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

u�d��
Size: 1325.0MB - Virtual size: 3088.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

:�$;��
Size: 2211.6MB - Virtual size: 2912.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

� � � �
Size: 2271.8MB - Virtual size: 2040.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

ļSQRVW�
Size: 1140.4MB - Virtual size: 1051.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�UVWX��Y
Size: 1659.5MB - Virtual size: 2742.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

v��wxyz�
Size: 2739.5MB - Virtual size: 803.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�
Size: 4024.7MB - Virtual size: 2208.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 72.7MB - Virtual size: 253.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4039.8MB - Virtual size: 2106.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��+E_^Z
Size: 1342.8MB - Virtual size: 3672.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

t!�|�=u
Size: 703B - Virtual size: 487.8MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+ߋ�_^[
Size: 1604.0MB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��
Size: 95.9MB - Virtual size: 87.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

��u �3
Size: 4072.2MB - Virtual size: 1509.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

u��u �
Size: 111.9MB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

u��u �
Size: 111.9MB - Virtual size: 62B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

u��u �d
Size: 1872.7MB - Virtual size: 1520.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��_^Ð
Size: 3124.3MB - Virtual size: 4095.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�7��ǿH
Size: 1884.0MB - Virtual size: 2227.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�wH5ǿH
Size: 2740.5MB - Virtual size: 3066.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��_^]�
Size: 1342.8MB - Virtual size: 4064.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

u�f�|C�\
Size: 1493.7MB - Virtual size: 76.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

�@f�<C
Size: 1100.4MB - Virtual size: 2102.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

V�]�u�
Size: 1112.6MB - Virtual size: 1062.0MB

IMAGE_SCN_MEM_READ

�
Size: 3109.9MB - Virtual size: 1885.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

&FK��u ^
Size: 1204.4MB - Virtual size: 3672.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

M��}�
Size: 4088.7MB - Virtual size: 4088.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 2097.0MB - Virtual size: 2136.9MB

�@
Size: 12B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

��@
Size: 2.3MB - Virtual size: 516.0MB

IMAGE_SCN_MEM_EXECUTE

��@4
Size: 1036.4MB - Virtual size: 3184.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@H
Size: - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA

��@`
Size: 26KB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��@x
Size: 4080.1MB - Virtual size: 1036.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��j��u�
Size: 3728.0MB - Virtual size: 4095.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��)
Size: 2KB - Virtual size: 4095.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

[��]�
Size: 135.3MB - Virtual size: 1342.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��I��u
Size: 2960.0MB - Virtual size: 1333.9MB

I��u�_^S
Size: 8B - Virtual size: 222.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�_^SWV��
Size: 246.4MB - Virtual size: 2960.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

WV��
Size: 246.4MB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��
Size: 3176.2MB - Virtual size: 246.4MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

Size: 268.5MB - Virtual size: 246.4MB

VWfof
Size: 1884.6MB - Virtual size: 3176.2MB

IMAGE_SCN_CNT_CODE

��VWfo
Size: 2132.6MB - Virtual size: 119.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4087.0MB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�
Size: - Virtual size: 4B

��@
Size: 8KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��@0
Size: 900.0MB - Virtual size: 1036.4MB

IMAGE_SCN_MEM_READ

D
Size: 3184.0MB - Virtual size:

�@\
Size: 100B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA

��@t
Size: 7.8MB - Virtual size: 1924.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��P�P
Size: 389.1MB - Virtual size: 3344.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

4�P8�P<�
Size: 3348.8MB - Virtual size: 1293.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�Pl�Pp�P
Size: 4096.0MB - Virtual size: 1925.1MB

IMAGE_SCN_MEM_READ

px�
Size: 401.8MB - Virtual size: 1432.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

�y,P X
Size: 1432.7MB - Virtual size: 647.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

Q@�YD�qH
Size: 1159.0MB - Virtual size: 404.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

TpXx\�
Size: 406.8MB - Virtual size: 1432.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�y|PpX
Size: 50KB - Virtual size: 1927.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

yX
Size: 2225.3MB - Virtual size: 1921.1MB

IMAGE_SCN_MEM_EXECUTE

�Y$�q(�y
Size: 1921.1MB - Virtual size: 517.0MB

p8x<�Q@
Size: 1029.0MB - Virtual size: 2228.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

\PPXT
Size: 2230.3MB - Virtual size: 1921.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�Yt�qx�y
Size: 1921.1MB - Virtual size: 1797.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

P�P�P
Size: 709.1MB - Virtual size: 3346.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

H�PL�PP�
Size: 3350.0MB - Virtual size: 1293.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: 1432.7MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�Y�q�
Size: 273.5MB - Virtual size: 1281.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

p(x,�Q
Size: 1281.1MB - Virtual size: 837.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

yLP@XD
Size: 1349.6MB - Virtual size: 276.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

`�Yd�qh�
Size: 278.5MB - Virtual size: 1281.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

pxx|��
Size: 1432.7MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�Y�q�
Size: 401.5MB - Virtual size: 1281.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

p(x,�Q
Size: 1281.6MB - Virtual size: 837.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

yLP@XD
Size: 1349.6MB - Virtual size: 404.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

`�Yd�qh�
Size: 406.5MB - Virtual size: 1281.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

pxx|�
Size: 1240.7MB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

x�Q�
Size: 273.0MB - Virtual size: 1816.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

P X$p
Size: 1816.7MB - Virtual size: 711.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

YD�qH�yL
Size: 1223.5MB - Virtual size: 276.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Xx\�Q`�
Size: 278.0MB - Virtual size: 1816.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PpXtp
Size: 3032.2MB - Virtual size: 1991.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�U�
Size: 2097.0MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

��$�
Size: 583.3MB - Virtual size: 2888.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

�S�F<U�D
Size: 2KB - Virtual size: 257.0MB

IMAGE_SCN_MEM_DISCARDABLE

D$p�D$x
Size: 1538.3MB - Virtual size: 772.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�D$l�D$
Size: 1602.3MB - Virtual size: 1666.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�D$T�$
Size: 2224.0MB - Virtual size: 128B

IMAGE_SCN_CNT_UNINITIALIZED_DATA

�D$4�D$P
Size: 3184.2MB - Virtual size: 642.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

$ �D$ �
Size: 580.3MB - Virtual size: 834.3MB

IMAGE_SCN_CNT_CODE

>��1D$
Size: 2238.5MB - Virtual size: 450.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

0��3��D
Size: 816.5MB - Virtual size: 3168.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�� 1D$
Size: 816.9MB - Virtual size: 322.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

0�t$(��
Size: 258.3MB - Virtual size: 386.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

��3��
Size: 1864.7MB - Virtual size: 2195.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

$8�� 1D$
Size: 3100.4MB - Virtual size: 580.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

D$�D$�
Size: 1091.1MB - Virtual size: 54.5MB

IMAGE_SCN_MEM_WRITE

t$(�D$
Size: 1538.3MB - Virtual size: 583.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�|$,��3
Size: 800.3MB - Virtual size: 583.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

1D$�D$
Size: 816.9MB - Virtual size: 1858.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�
Size: 3459.2MB - Virtual size: 3715.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

��t$H3
Size: 140B - Virtual size: 583.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

��$�
Size: 8.8MB - Virtual size: 580.8MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

-L�P
Size: 245.0MB - Virtual size: 246.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��|ӃF
Size: 581.4MB - Virtual size: 3496.7MB

IMAGE_SCN_MEM_EXECUTE

ro�O��D
Size: 949.0MB - Virtual size: 956.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

��Ɖ|
Size: 1096.7MB - Virtual size: 1992.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

f��I�
Size: 3825.0MB - Virtual size: 3844.1MB

IMAGE_SCN_MEM_EXECUTE

P�:+��
Size: 2112.0MB - Virtual size: 72.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

|$<��$�
Size: 1461.9MB - Virtual size: 3368.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�ww��{{�
Size: 3559.0MB - Virtual size: 4095.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��b�׵
Size: 2300.7MB - Virtual size: 1242.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�GG��
Size: 1530.2MB - Virtual size: 1050.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

·�u��
Size: 1731.4MB - Virtual size: 985.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

4��
Size: 1571.1MB - Virtual size: 3623.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

(0��7
Size: 224.4MB - Virtual size: 160.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Ͳ��uu�
Size: 1410.8MB - Virtual size: 288.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�RR�M;;v
Size: 1314.6MB - Virtual size: 2941.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��,��
Size: 1947.1MB - Virtual size: 1026.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�JJ��LL�
Size: 3005.1MB - Virtual size: 2821.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

U33f��
Size: 64.1MB - Virtual size: 2212.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�QQ��]
Size: 1017.2MB - Virtual size: 2052.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

u�گc!!B
Size: 4063.2MB - Virtual size: 513.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�__��5
Size: 2364.3MB - Virtual size: 2180.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

+2�ss�
Size: 2533.0MB - Virtual size: 3078.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�FF�)��
Size: 2685.9MB - Virtual size: 1723.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

N::t
Size: 1154.3MB - Virtual size: 2340.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��9��1
Size: 3422.5MB - Virtual size: 3390.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�NN�੩I
Size: 3903.3MB - Virtual size: 3462.8MB

պ�o�xx�
Size: 897.8MB - Virtual size: 1186.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�tt�!>
Size: 216.7MB - Virtual size: 2404.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�HH�
Size: 3110.1MB - Virtual size: 3967.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

':��'
Size: 697.5MB - Virtual size: 3486.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��-"<
Size: 2172.9MB - Virtual size: 344.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: 2116.1MB - Virtual size: 1628.0MB

IMAGE_SCN_MEM_DISCARDABLE

˰�{�TT�
Size: 2652.4MB - Virtual size: 1755.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

ooޱ�őT
Size: 2716.9MB - Virtual size: 1286.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�ʏE��
Size: 351.0MB - Virtual size: 1032.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��_��E�
Size: 2414.3MB - Virtual size: 3058.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

66lZ??~A
Size: 1478.5MB - Virtual size: 47.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

11bS*?
Size: 1620.4MB - Virtual size: 192.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

4 Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

�?�l�;�^ Size: 1424.2MB - Virtual size: 3422.1MB

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

4
Size: - Virtual size:

�?�l�;�^
Size: 1424.2MB - Virtual size: 3422.1MB

��
Size: 3276.8MB - Virtual size: 3276.8MB

ȋMu�E
Size: 2238.1MB - Virtual size: 1470.1MB

Size: 3134.1MB - Virtual size: 527.6MB

W�M�u�
Size: 4088.7MB - Virtual size: 2639.2MB

��@�3�f
Size: 8.0MB - Virtual size: 33KB

�f��SQj
Size: 3081.3MB - Virtual size: 3962.1MB

��
Size: 1439.7MB - Virtual size: 1868.0MB

Í@
Size: 1.6MB - Virtual size: 4090.4MB

<�
Size: - Virtual size: 4096.0MB

�f��
Size: 196.3MB - Virtual size:

�U�u�3
Size: 333B - Virtual size: 3.0MB

�А��u�
Size: 4.0MB - Virtual size: 1445.9MB

Arf��Zw
Size: 12KB - Virtual size: 3208.2MB

M
Size: 1429.6MB - Virtual size: 2137.1MB

f��u��
Size: 140.1MB - Virtual size: 3886.7MB

H��
Size: 4.0MB - Virtual size: 1455.1MB

��u��
Size: 60.0MB - Virtual size: 1644.0MB

ؐO�u��
Size: 3363.2MB - Virtual size: 1152.2MB

��u��
Size: 1532.1MB - Virtual size: 1792.8MB

VW��
Size: 2735.2MB - Virtual size: 2970.7MB

�4��
Size: 2970.7MB - Virtual size: 3B

�й
Size: 4074.7MB - Virtual size: 2970.7MB

��u�
Size: 2007.3MB - Virtual size: 2959.8MB

u�d��
Size: 1325.0MB - Virtual size: 3088.8MB

:�$;��
Size: 2211.6MB - Virtual size: 2912.9MB

� � � �
Size: 2271.8MB - Virtual size: 2040.5MB

ļSQRVW�
Size: 1140.4MB - Virtual size: 1051.5MB

�UVWX��Y
Size: 1659.5MB - Virtual size: 2742.1MB

v��wxyz�
Size: 2739.5MB - Virtual size: 803.1MB

�
Size: 4024.7MB - Virtual size: 2208.1MB

��
Size: 72.7MB - Virtual size: 253.0MB

��
Size: 4039.8MB - Virtual size: 2106.7MB

��+E_^Z
Size: 1342.8MB - Virtual size: 3672.7MB

t!�|�=u
Size: 703B - Virtual size: 487.8MB

+ߋ�_^[
Size: 1604.0MB - Virtual size: 304KB

��
Size: 95.9MB - Virtual size: 87.3MB

��u �3
Size: 4072.2MB - Virtual size: 1509.9MB

u��u �
Size: 111.9MB - Virtual size: 60B

u��u �
Size: 111.9MB - Virtual size: 62B

u��u �d
Size: 1872.7MB - Virtual size: 1520.0MB

��_^Ð
Size: 3124.3MB - Virtual size: 4095.6MB

�7��ǿH
Size: 1884.0MB - Virtual size: 2227.0MB

�wH5ǿH
Size: 2740.5MB - Virtual size: 3066.2MB

��_^]�
Size: 1342.8MB - Virtual size: 4064.2MB

u�f�|C�\
Size: 1493.7MB - Virtual size: 76.4MB

�@f�<C
Size: 1100.4MB - Virtual size: 2102.4MB

V�]�u�
Size: 1112.6MB - Virtual size: 1062.0MB

�
Size: 3109.9MB - Virtual size: 1885.7MB

&FK��u ^
Size: 1204.4MB - Virtual size: 3672.7MB

M��}�
Size: 4088.7MB - Virtual size: 4088.7MB