2024-06-01_9fd69d9b44321a1f495e237d29d25326_darkside

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_9fd69d9b44321a1f495e237d29d25326_darkside
Size

276KB
MD5

9fd69d9b44321a1f495e237d29d25326
SHA1

4970008f32836510a7b1be48482dd906c47d9b71
SHA256

50f4e7a33d3051de936ca3b088e4412be97f92a1830b3dcda724791cdc4b67c1
SHA512

7573c17ed79de61a69f59134a6aa43f5a0abeb25e6163482549db72eabb300874e58d7ef5e0cbc823e714c0407a9496084f02f22dfc556d0b3bdaa16df77197f
SSDEEP

3072:bfuJ9OlKolUa1U197bzhVsmftslI74Aw6iecHbWLsuH8U2VEMTVyOlGmrdtDZB:bfufj0zi1dNVsmft7cHnbhbpXrX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_9fd69d9b44321a1f495e237d29d25326_darkside

Files

2024-06-01_9fd69d9b44321a1f495e237d29d25326_darkside
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size:

IMAGE_SCN_MEM_READ

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

�tj�O]&
Size: 1552.1MB - Virtual size: 4007.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

S�E�M
Size: 1470.1MB - Virtual size: 260.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��[Y]�
Size: 527.6MB - Virtual size: 4088.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3�ÐU��V
Size: 2639.2MB - Virtual size: 260.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

}��_]�
Size: 3097.0MB - Virtual size: 4.0MB

d�
Size: 193B - Virtual size: 22.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

3��
Size: 3980.4MB - Virtual size: 2384.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��Y[Í@
Size: 497.0MB - Virtual size: 1310.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

D
Size: - Virtual size: 1638.4MB

IMAGE_SCN_MEM_DISCARDABLE

@
Size: 32KB - Virtual size:

wZY]�
Size: 3075.2MB - Virtual size: 4088.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��*�3ɹ
Size: 3376.0MB - Virtual size: 6B

U��QRV3�
Size: 3976.2MB - Virtual size: 2224.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��M
Size: 2256.0MB - Virtual size: 3858.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

]�
Size: 2774.4MB - Virtual size: 3507.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��@�U��Q
Size: 2559.4MB - Virtual size: 132.8MB

U��SVW�E
Size: 63KB - Virtual size: 196.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

;�s��
Size: 52.4MB - Virtual size: 2316.9MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��R��
Size: 2309.5MB - Virtual size: 2317.1MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

^[]�
Size: 1317.1MB - Virtual size: 2078.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�>��
Size: 10B - Virtual size: 2735.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

Size: 4030.2MB - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 2223.5MB - Virtual size: 2735.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

:D��u
Size: 3081.3MB - Virtual size: 486.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�]��
Size: 72.7MB - Virtual size: 1405.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

<9_�Ԋ��
Size: 3072.3MB - Virtual size: 3772.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

u�X_^Z
Size: 2110.8MB - Virtual size: 3672.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

H��IJKL�
Size: 2741.3MB - Virtual size: 1268.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

hij��klm
Size: 1879.3MB - Virtual size: 1787.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�89+/��u
Size: 2008.2MB - Virtual size: 196.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 3660.0MB - Virtual size: 46.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

2�$1��
Size: 4095.9MB - Virtual size: 456.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�t}��
Size: 12.5MB - Virtual size: 1120.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

VW3��u3
Size: 3512.4MB - Virtual size: 1072.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��|�=
Size: 3772.1MB - Virtual size: 27.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Í@
Size: 2699.5MB - Virtual size: 2240.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

��_^��
Size: 1872.1MB - Virtual size: 2096.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�u �4
Size: 2128.9MB - Virtual size: 3125.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

u �=
Size: 4088.2MB - Virtual size: 3772.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

u �?
Size: 4088.3MB - Virtual size: 3772.2MB

w�� v�
Size: 4096.0MB - Virtual size: 2048.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��@�@<�
Size: 3944.1MB - Virtual size: 1390.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

�f��z
Size: 849.6MB - Virtual size: 58.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

5��f
Size: 1510.0MB - Virtual size: 2742.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA

�t3��]
Size: 2102.4MB - Virtual size: 1636.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

U��SQ�}
Size: 1636.0MB - Virtual size: 818.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��Y[]�
Size: 197.8MB - Virtual size: 2110.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�E�Ph
Size: 764B - Virtual size: 5.9MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

FK��u ^Y
Size: 2132.7MB - Virtual size: 1502.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

^Y[��]�
Size: 2008.2MB - Virtual size: 270.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�(
Size: 3854.0MB - Virtual size: 4087.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

��
Size: 272KB - Virtual size: 12.5MB

��@
Size: 1036.4MB - Virtual size: 3184.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@(
Size: - Virtual size: 44B

IMAGE_SCN_CNT_CODE

��@@
Size: 18KB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��@X
Size: 1540.0MB - Virtual size: 1036.4MB

IMAGE_SCN_MEM_READ

l
Size: 3184.0MB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: 6.6MB - Virtual size: 4095.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA

�u�u��
Size: 670.6MB - Virtual size: 4096.0MB

��
Size: 1502.3MB - Virtual size: 3224.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

Size: 268.5MB - Virtual size: 246.4MB

VWfof
Size: 1884.6MB - Virtual size: 3176.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

of��
Size: 1333.9MB - Virtual size: 268.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

��
Size: 3166.5MB - Virtual size: 1884.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��I��u
Size: 2960.0MB - Virtual size: 1333.9MB

I��u�_^S
Size: 8B - Virtual size: 2014.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�_^SWV�Y
Size: 246.4MB - Virtual size: 2960.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

WV�5
Size: 1397.4MB - Virtual size: 1856.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

^S�uV�
Size: 4088.7MB - Virtual size: 1520.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��l�
Size: 199B - Virtual size: 2136.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��@
Size: 388.0MB - Virtual size: 1036.4MB

IMAGE_SCN_MEM_READ

$
Size: 3184.0MB - Virtual size:

�@<
Size: 68B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

��@T
Size: 5.8MB - Virtual size: 1412.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��@l
Size: 1036.4MB - Virtual size: 3184.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�h��
Size: 1293.1MB - Virtual size: 1736.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

P �P$�P(
Size: 901.1MB - Virtual size: 3346.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

T�PX�P\�
Size: 3350.8MB - Virtual size: 1293.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��Y�q
Size: 135.0MB - Virtual size: 199.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

px�
Size: 402.8MB - Virtual size: 1432.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

�y<P0X
Size: 1432.7MB - Virtual size: 903.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

QP�YT�qX
Size: 1415.0MB - Virtual size: 405.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dphxl�
Size: 407.8MB - Virtual size: 1432.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��M��
Size: 257.1MB - Virtual size: 69.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PX
Size: 2226.3MB - Virtual size: 1921.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

�Y4�q8�y
Size: 1921.1MB - Virtual size: 773.0MB

pHxL�QP
Size: 1285.0MB - Virtual size: 2229.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

lP`Xd
Size: 2231.3MB - Virtual size: 1921.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

��P�P
Size: 1293.1MB - Virtual size: 197.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

P4�P8�P<
Size: 1221.1MB - Virtual size: 3348.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

h�Pl�Pp�
Size: 12.5MB - Virtual size: 1293.1MB

�yX
Size: 325.6MB - Virtual size: 272.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�Y$�q(�
Size: 274.5MB - Virtual size: 1281.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

p8x<�Q
Size: 1281.1MB - Virtual size: 1093.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

y\PPXT
Size: 1605.6MB - Virtual size: 277.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

p�Yt�qx�
Size: 279.5MB - Virtual size: 1281.1MB

�yX
Size: 325.6MB - Virtual size: 400.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�Y$�q(�
Size: 402.5MB - Virtual size: 1281.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

p8x<�Q
Size: 1281.6MB - Virtual size: 1093.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

y\PPXT
Size: 1605.6MB - Virtual size: 405.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

p�Yt�qx�
Size: 407.5MB - Virtual size: 1281.6MB

�Y�q�y
Size: 199.5MB - Virtual size: 273.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

x�Q �
Size: 274.0MB - Virtual size: 1816.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

P0X4p
Size: 1816.7MB - Virtual size: 967.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

YT�qX�y\
Size: 1479.5MB - Virtual size: 277.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

hxl�Qp�
Size: 279.0MB - Virtual size: 1816.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�u��'�
Size: 2960.5MB - Virtual size: 2136.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�u�_^[��
Size: 2376.7MB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

$�
Size: 1128.8MB - Virtual size: 253.2MB

IMAGE_SCN_MEM_READ

$PF
Size: 1794.3MB - Virtual size: 246.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�D$t�D$
Size: 1730.3MB - Virtual size: 1794.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�D$\�D$
Size: 1346.3MB - Virtual size: 1410.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

��$�
Size: 834.3MB - Virtual size: 587.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��D$(Ɖ
Size: 1096.7MB - Virtual size: 3091.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

|$D��1D
Size: 124.0MB - Virtual size: 1992.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�� 3��t
Size: 236.5MB - Virtual size: 72.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

4�3�� 1
Size: 220.0MB - Virtual size: 2226.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

��1D$�
Size: 583.3MB - Virtual size: 49.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

ЋD$��
Size: 3084.1MB - Virtual size: 3203.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3��t$$�
Size: 3084.1MB - Virtual size: 2261.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

$(3��D$8
Size: 2225.3MB - Virtual size: 706.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

$�D$lD
Size: 2226.5MB - Virtual size: 3084.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

3��t$P�t
Size: 706.3MB - Virtual size: 1096.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

D$ �D$ �
Size: 450.3MB - Virtual size: 55.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

��3��t$
Size: 128B - Virtual size: 583.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�3ȃl$@
Size: 2240.0MB - Virtual size: 580.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�T$|��$�
Size: 2760.6MB - Virtual size: 2192.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

r��L�
Size: 1217.0MB - Virtual size: 3976.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

L�f�
Size: 271.5MB - Virtual size: 1217.1MB

IMAGE_SCN_MEM_READ

G�3҅�
Size: 1272.8MB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

Ǎt$`��
Size: 3598.3MB - Virtual size: 2270.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

$@��
Size: 3214.9MB - Virtual size: 242.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�;�rՋt$
Size: 928.8MB - Virtual size: 1853.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�|$<��$�
Size: 2195.8MB - Virtual size: 48.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�
Size: 3815.5MB - Virtual size: 3174.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

P00`
Size: 3711.9MB - Virtual size: 3302.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

@�ɉ�}}�
Size: 2276.5MB - Virtual size: 3839.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

��#��S
Size: 1883.5MB - Virtual size: 3655.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��O�̃
Size: 3358.4MB - Virtual size: 1667.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

R�Ǖ
Size: 769.5MB - Virtual size: 1122.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

��=��
Size: 2043.2MB - Virtual size: 3294.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

-6�nn�
Size: 2629.1MB - Virtual size: 2885.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

q//^��
Size: - Virtual size: 2661.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�jj�F�ˍ
Size: 2372.6MB - Virtual size: 1659.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

媪O��
Size: 1635.2MB - Virtual size: 2148.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�PP�D<<x
Size: 2597.1MB - Virtual size: 602.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

H88p��
Size: 2813.7MB - Virtual size: 1595.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

L�́
Size: 3046.0MB - Virtual size: 609.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�~~�G==z
Size: 801.6MB - Virtual size: 3206.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

f""D~**T
Size: 2244.4MB - Virtual size: 953.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

v�ۭ
Size: 1859.6MB - Virtual size: 3518.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

]�n�ӽ
Size: 921.1MB - Virtual size: 1082.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

Y77n�mm�
Size: 2500.9MB - Virtual size: 24.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�eeʎzz�
Size: 1787.7MB - Virtual size: 1146.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Ǵ�sQ�Ɨ
Size: 3719.3MB - Virtual size: 3262.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�pp�B>>|
Size: 2308.5MB - Virtual size: 1819.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�WW�й�i
Size: 929.8MB - Virtual size: 376.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

�ii�p�٩
Size: 729.7MB - Virtual size: 120.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

x((Pz�ߥ
Size: 152.6MB - Virtual size: 56.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�AA��)
Size: 1979.0MB - Virtual size: 1442.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

ww��{{��
Size: 2845.9MB - Virtual size: 224.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��׵b
Size: 1113.0MB - Virtual size: 3684.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GG��
Size: 4054.0MB - Virtual size: 3780.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��u��
Size: 1446.8MB - Virtual size: 2787.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��4��
Size: 1334.1MB - Virtual size: 2366.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

0(��7�
Size: 144.9MB - Virtual size: 240.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

8 Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

�tj�O]& Size: 1552.1MB - Virtual size: 4007.6MB

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

8
Size: - Virtual size:

�tj�O]&
Size: 1552.1MB - Virtual size: 4007.6MB

S�E�M
Size: 1470.1MB - Virtual size: 260.8MB

��[Y]�
Size: 527.6MB - Virtual size: 4088.7MB

3�ÐU��V
Size: 2639.2MB - Virtual size: 260.8MB

}��_]�
Size: 3097.0MB - Virtual size: 4.0MB

d�
Size: 193B - Virtual size: 22.6MB

3��
Size: 3980.4MB - Virtual size: 2384.9MB

��Y[Í@
Size: 497.0MB - Virtual size: 1310.8MB

D
Size: - Virtual size: 1638.4MB

@
Size: 32KB - Virtual size:

wZY]�
Size: 3075.2MB - Virtual size: 4088.7MB

��*�3ɹ
Size: 3376.0MB - Virtual size: 6B

U��QRV3�
Size: 3976.2MB - Virtual size: 2224.8MB

��M
Size: 2256.0MB - Virtual size: 3858.7MB

]�
Size: 2774.4MB - Virtual size: 3507.2MB

��@�U��Q
Size: 2559.4MB - Virtual size: 132.8MB

U��SVW�E
Size: 63KB - Virtual size: 196.8MB

;�s��
Size: 52.4MB - Virtual size: 2316.9MB

��R��
Size: 2309.5MB - Virtual size: 2317.1MB

^[]�
Size: 1317.1MB - Virtual size: 2078.8MB

�>��
Size: 10B - Virtual size: 2735.2MB

��
Size: 2223.5MB - Virtual size: 2735.2MB

:D��u
Size: 3081.3MB - Virtual size: 486.3MB

�]��
Size: 72.7MB - Virtual size: 1405.9MB

<9_�Ԋ��
Size: 3072.3MB - Virtual size: 3772.0MB

u�X_^Z
Size: 2110.8MB - Virtual size: 3672.7MB

H��IJKL�
Size: 2741.3MB - Virtual size: 1268.9MB

hij��klm
Size: 1879.3MB - Virtual size: 1787.5MB

�89+/��u
Size: 2008.2MB - Virtual size: 196.3MB

��
Size: 3660.0MB - Virtual size: 46.5MB

2�$1��
Size: 4095.9MB - Virtual size: 456.7MB

�t}��
Size: 12.5MB - Virtual size: 1120.0MB

VW3��u3
Size: 3512.4MB - Virtual size: 1072.1MB

��|�=
Size: 3772.1MB - Virtual size: 27.9MB

Í@
Size: 2699.5MB - Virtual size: 2240.0MB

��_^��
Size: 1872.1MB - Virtual size: 2096.0MB

�u �4
Size: 2128.9MB - Virtual size: 3125.9MB

u �=
Size: 4088.2MB - Virtual size: 3772.2MB

u �?
Size: 4088.3MB - Virtual size: 3772.2MB

w�� v�
Size: 4096.0MB - Virtual size: 2048.0MB

��@�@<�
Size: 3944.1MB - Virtual size: 1390.8MB

�f��z
Size: 849.6MB - Virtual size: 58.0MB

5��f
Size: 1510.0MB - Virtual size: 2742.4MB

�t3��]
Size: 2102.4MB - Virtual size: 1636.0MB

U��SQ�}
Size: 1636.0MB - Virtual size: 818.0MB

��Y[]�
Size: 197.8MB - Virtual size: 2110.8MB

�E�Ph
Size: 764B - Virtual size: 5.9MB

FK��u ^Y
Size: 2132.7MB - Virtual size: 1502.3MB

^Y[��]�
Size: 2008.2MB - Virtual size: 270.5MB

�(
Size: 3854.0MB - Virtual size: 4087.0MB