2024-06-01_ca0d44ad1614736bafcc19f3afb80709_darkside

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_ca0d44ad1614736bafcc19f3afb80709_darkside
Size

264KB
MD5

ca0d44ad1614736bafcc19f3afb80709
SHA1

0d8fa84ce50aaac6acb1a25caa4c5ef9446acf84
SHA256

73f77fc90bdec9f5b3872735096b9bd672de19df7ad31620b763ed3ab2061bb2
SHA512

b549842aab570e11b93d476af09c6b38c0b9b4ff11a6245c69f31cc63c62e5dd1de4f4bbeea749f692d624378bad59ca7de9757297c75c9fede9b0340d931e1b
SSDEEP

3072:t6glyuxE4GsUPnliByocWepZ8HtoTc0U7DFim9622xyQaFOlGHrSsWOwX:t6gDBGpvEByocWeINh0GDFS6Zr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_ca0d44ad1614736bafcc19f3afb80709_darkside

Files

2024-06-01_ca0d44ad1614736bafcc19f3afb80709_darkside
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size:

IMAGE_SCN_MEM_READ

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�#!�NnB�
Size: 1872.1MB - Virtual size: 1466.3MB

IMAGE_SCN_MEM_DISCARDABLE

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

S�E�M
Size: 1470.1MB - Virtual size: 260.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��[Y]�
Size: 527.6MB - Virtual size: 4088.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3�ÐU��V
Size: 2639.2MB - Virtual size: 260.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

}��_]�
Size: 128B - Virtual size: 4.0MB

��@��d�
Size: 4088.7MB - Virtual size: 2113.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

��Y[
Size: 48KB - Virtual size: 1408.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�� 1�
Size: 4.0MB - Virtual size: 220.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�_�n<f
Size: 1638.4MB - Virtual size: 17KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

��Aff�
Size: 17KB - Virtual size:

r;EwZ
Size: 1310.8MB - Virtual size: 140.1MB

M
Size: 20.8MB - Virtual size: 2972.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��@�U��Q
Size: 2774.4MB - Virtual size: 3075.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�0
Size: 107.6MB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�^ZY]�
Size: 2224.5MB - Virtual size: 1342.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

[]�
Size: 2304.8MB - Virtual size: 1310.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��@�U��S
Size: 593.0MB - Virtual size: 1112.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

��_;�s
Size: 2305.4MB - Virtual size: 3992.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

3Ґ��
Size: 2233.1MB - Virtual size: 3128.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

3�_^[]�
Size: 65KB - Virtual size: 4088.7MB

IMAGE_SCN_CNT_CODE

��>��
Size: 2970.6MB - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

2��
Size: 2732.0MB - Virtual size: 2735.2MB

�ª��
Size: 816.5MB - Virtual size: 133B

IMAGE_SCN_CNT_CODE

+�t}:D�
Size: 484.3MB - Virtual size: 1884.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

[+�R�]��
Size: 4079.8MB - Virtual size: 3355.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�:�<9_�
Size: 110.4MB - Virtual size: 3087.2MB

�M��u�
Size: 560KB - Virtual size: 1445.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�EFGH��I
Size: 1307.5MB - Virtual size: 2740.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

f��ghij�
Size: 2743.2MB - Virtual size: 1750.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

567��89+
Size: 2239.8MB - Virtual size: 1880.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 3072.3MB - Virtual size: 3704.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

u��2�$1
Size: 787.8MB - Virtual size: 253.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��}�
Size: 2239.5MB - Virtual size: 124.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA

U��SVW3�
Size: 1.9MB - Virtual size: 816.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�
Size: 2256.0MB - Virtual size: 991.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��@d�
Size: 2240.0MB - Virtual size: 4088.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��s �
Size: 2096.0MB - Virtual size: 1520.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��u�
Size: 3125.9MB - Virtual size: 167.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

f��u��
Size: 3772.2MB - Virtual size: 2944.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>��u��
Size: 3772.2MB - Virtual size: 2944.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�� u��
Size: 2048.0MB - Virtual size: 4072.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

�@D��;��
Size: 1390.8MB - Virtual size: 260.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

f��u9f�\
Size: 54.0MB - Virtual size: 2954.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_��_1
Size: 2742.4MB - Virtual size: 1536.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

U��SQ�}
Size: 1636.0MB - Virtual size: 817.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA

�Y[]��
Size: 818.0MB - Virtual size: 1342.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

u�DC�
Size: 2110.8MB - Virtual size: 1461.6MB

�
Size: 5.9MB - Virtual size: 1295.3MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��]�
Size: 1502.3MB - Virtual size: 3512.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

0FK��u
Size: 270.5MB - Virtual size: 2229.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

B
Size: 4087.0MB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 12.5MB - Virtual size: 4096.0MB

IMAGE_SCN_MEM_READ

Size: 3184.0MB - Virtual size:

�@$
Size: 44B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

��@<
Size: 4.3MB - Virtual size: 1028.0MB

IMAGE_SCN_MEM_READ

��@T
Size: 1036.4MB - Virtual size: 3184.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@h
Size: - Virtual size: 108B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

��u�u
Size: 4095.9MB - Virtual size: 3467.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��@
Size: 4096.0MB - Virtual size: 4080.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

�
Size: 3224.3MB - Virtual size: 2096.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�u�}�
Size: 246.4MB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

Size: 3176.2MB - Virtual size: 246.4MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

Size: 268.5MB - Virtual size: 246.4MB

VWfof
Size: 1884.6MB - Virtual size: 3176.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

of��
Size: 1333.9MB - Virtual size: 268.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

��
Size: 2014.5MB - Virtual size: 1884.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��I��u
Size: 2960.0MB - Virtual size: 1333.9MB

I��u�_^S
Size: 1856.0MB - Virtual size: 862.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�I��u�_
Size: 1520.0MB - Virtual size: 1888.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��p��
Size: 2136.7MB - Virtual size: 3854.0MB

��@
Size: 1036.4MB - Virtual size: 3184.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@
Size: - Virtual size: 36B

IMAGE_SCN_CNT_CODE

��@8
Size: 16KB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��@P
Size: 1412.0MB - Virtual size: 1036.4MB

IMAGE_SCN_MEM_READ

d
Size: 3184.0MB - Virtual size:

�@|
Size: 1736.3MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�P�P�
Size: 3346.8MB - Virtual size: 1293.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�PL�PP�P
Size: 1293.1MB - Virtual size: 1413.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�l��M
Size: 199.6MB - Virtual size: 2225.1MB

�yPX
Size: 1432.7MB - Virtual size: 391.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

Q0�Y4�q8
Size: 903.0MB - Virtual size: 403.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DpHxL�
Size: 405.8MB - Virtual size: 1432.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�ylP`X
Size: 1432.7MB - Virtual size: 1671.0MB

IMAGE_SCN_MEM_DISCARDABLE

��
Size: 69.6MB - Virtual size: 2240.0MB

�Y�q�y
Size: 1921.1MB - Virtual size: 261.0MB

p(x,�Q0
Size: 773.0MB - Virtual size: 2227.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

LP@XD
Size: 2229.3MB - Virtual size: 1921.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�Yd�qh�y
Size: 1921.1MB - Virtual size: 1541.0MB

pxx|�E
Size: 197.1MB - Virtual size: 3345.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

(�P,�P0�
Size: 3348.0MB - Virtual size: 1293.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�P`�Pd�P
Size: 1293.1MB - Virtual size: 1733.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��Y�q
Size: 272.5MB - Virtual size: 272.8MB

px�Q
Size: 1281.1MB - Virtual size: 581.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

y<P0X4
Size: 1093.6MB - Virtual size: 275.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

P�YT�qX�
Size: 277.5MB - Virtual size: 1281.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

phxl�Q
Size: 1281.1MB - Virtual size: 1861.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��Y�q
Size: 400.5MB - Virtual size: 400.8MB

px�Q
Size: 1281.6MB - Virtual size: 581.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

y<P0X4
Size: 1093.6MB - Virtual size: 403.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

P�YT�qX�
Size: 405.5MB - Virtual size: 1281.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

phxl�Q
Size: 1281.6MB - Virtual size: 1861.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��M��
Size: 273.0MB - Virtual size: 2224.3MB

PXp
Size: 1816.7MB - Virtual size: 455.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

Y4�q8�y<
Size: 967.5MB - Virtual size: 275.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

HxL�QP�
Size: 277.0MB - Virtual size: 1816.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

P`Xdp
Size: 1816.7MB - Virtual size: 1735.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��h��
Size: 2136.7MB - Virtual size: 3760.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

��I�
Size: 816KB - Virtual size: 1534.8MB

IMAGE_SCN_CNT_CODE

��t$<W��
Size: 253.2MB - Virtual size: 37KB

IMAGE_SCN_MEM_EXECUTE

@
Size: 246.0MB - Virtual size: 257.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�t$`�D$0
Size: 1794.3MB - Virtual size: 1858.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

�D$d�D$,
Size: 1410.3MB - Virtual size: 1474.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

��$�
Size: 587.8MB - Virtual size: 2760.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

$8��3
Size: 3091.5MB - Virtual size: 580.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��D$ ǉ
Size: 1992.7MB - Virtual size: 3092.3MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3��D$
Size: 72.8MB - Virtual size: 220.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

��3؋|$
Size: 2226.3MB - Virtual size: 816.3MB

IMAGE_SCN_MEM_EXECUTE

��3��
Size: 49.0MB - Virtual size: 784.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

D$�� 3
Size: 3203.2MB - Virtual size: 580.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

7�t$$��
Size: 2261.5MB - Virtual size: 2207.0MB

IMAGE_SCN_MEM_EXECUTE

\��t
Size: 706.3MB - Virtual size: 3843.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

� 1D$�D
Size: 3084.1MB - Virtual size: 1096.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

�|$`�|$,
Size: 1096.7MB - Virtual size: 1864.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

D�2�� 1
Size: 55.0MB - Virtual size: 2226.0MB

IMAGE_SCN_MEM_EXECUTE

��3��
Size: 583.3MB - Virtual size: 816.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

� 3؍+�
Size: 580.3MB - Virtual size: 3203.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

�
Size: 2192.0MB - Virtual size: 1986.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�$�
Size: 3976.2MB - Virtual size: 200.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

L�PD�`
Size: 1217.1MB - Virtual size: 2148.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��V$��@
Size: 37KB - Virtual size: 829.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

D$P;�sZ�
Size: 2270.7MB - Virtual size: 583.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

$@�D$D�t
Size: 242.0MB - Virtual size: 257.0MB

IMAGE_SCN_MEM_DISCARDABLE

�f��I
Size: 1853.2MB - Virtual size: 1837.3MB

IMAGE_SCN_CNT_CODE

0A��u�
Size: 48.0MB - Virtual size: 962.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��][_^��
Size: 3174.2MB - Virtual size: 132B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�oo�T�ő
Size: 3302.5MB - Virtual size: 1539.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

E�ʏ��
Size: 3839.7MB - Virtual size: 2204.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��_꯯E
Size: 3655.2MB - Virtual size: 569.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Z66lA??~
Size: 1667.3MB - Virtual size: 3935.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

S11b?*
Size: 1122.2MB - Virtual size: 128.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

6$
Size: 3294.7MB - Virtual size: 440.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

t,,X.4
Size: 2885.6MB - Virtual size: 865.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

{))R>��
Size: 2661.2MB - Virtual size: 1506.9MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ȱ�y�[[�
Size: 1659.9MB - Virtual size: 3398.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

k�л*��
Size: 2148.2MB - Virtual size: 1274.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 602.0MB - Virtual size: 2565.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

��?��!
Size: 1595.8MB - Virtual size: 1795.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��m�ҿ
Size: 609.2MB - Virtual size: 2076.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

W�ē��U
Size: 3206.3MB - Virtual size: 4039.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

�OO��ܣ
Size: 953.0MB - Virtual size: 1090.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

y�ާ�^^�
Size: 3518.1MB - Virtual size: 352.7MB

l$$H�\\�
Size: 1082.8MB - Virtual size: 2556.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2��C�ȋ
Size: 24.8MB - Virtual size: 1763.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��%��
Size: 1146.9MB - Virtual size: 3238.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

$8��W
Size: 3262.6MB - Virtual size: 1851.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: 1819.4MB - Virtual size: 3591.0MB

�aa�_55j
Size: 376.4MB - Virtual size: 2789.5MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��+3"
Size: 120.9MB - Virtual size: 3366.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

I�·�UU�
Size: 56.8MB - Virtual size: 1282.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�BB��hh�
Size: 1442.8MB - Virtual size: 2084.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

ccƥ||��
Size: 224.0MB - Virtual size: 2462.9MB

IMAGE_SCN_MEM_DISCARDABLE

ggΩ++V}
Size: 3684.9MB - Virtual size: 414.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��YY��
Size: 3780.1MB - Virtual size: 3224.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rr��[
Size: 2787.8MB - Virtual size: 3111.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

44h\��Q�
Size: 2366.2MB - Virtual size: 845.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

##Fe�Ý^
Size: 240.6MB - Virtual size: 643.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

4 Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

�#!�NnB� Size: 1872.1MB - Virtual size: 1466.3MB

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

4
Size: - Virtual size:

�#!�NnB�
Size: 1872.1MB - Virtual size: 1466.3MB

S�E�M
Size: 1470.1MB - Virtual size: 260.8MB

��[Y]�
Size: 527.6MB - Virtual size: 4088.7MB

3�ÐU��V
Size: 2639.2MB - Virtual size: 260.8MB

}��_]�
Size: 128B - Virtual size: 4.0MB

��@��d�
Size: 4088.7MB - Virtual size: 2113.9MB

��Y[
Size: 48KB - Virtual size: 1408.5MB

�� 1�
Size: 4.0MB - Virtual size: 220.2MB

�_�n<f
Size: 1638.4MB - Virtual size: 17KB

��Aff�
Size: 17KB - Virtual size:

r;EwZ
Size: 1310.8MB - Virtual size: 140.1MB

M
Size: 20.8MB - Virtual size: 2972.6MB

��@�U��Q
Size: 2774.4MB - Virtual size: 3075.2MB

�0
Size: 107.6MB - Virtual size: 1B

�^ZY]�
Size: 2224.5MB - Virtual size: 1342.8MB

[]�
Size: 2304.8MB - Virtual size: 1310.8MB

��@�U��S
Size: 593.0MB - Virtual size: 1112.7MB

��_;�s
Size: 2305.4MB - Virtual size: 3992.7MB

3Ґ��
Size: 2233.1MB - Virtual size: 3128.7MB

3�_^[]�
Size: 65KB - Virtual size: 4088.7MB

��>��
Size: 2970.6MB - Virtual size: 3B

2��
Size: 2732.0MB - Virtual size: 2735.2MB

�ª��
Size: 816.5MB - Virtual size: 133B

+�t}:D�
Size: 484.3MB - Virtual size: 1884.2MB

[+�R�]��
Size: 4079.8MB - Virtual size: 3355.4MB

�:�<9_�
Size: 110.4MB - Virtual size: 3087.2MB

�M��u�
Size: 560KB - Virtual size: 1445.9MB

�EFGH��I
Size: 1307.5MB - Virtual size: 2740.8MB

f��ghij�
Size: 2743.2MB - Virtual size: 1750.8MB

567��89+
Size: 2239.8MB - Virtual size: 1880.7MB

��
Size: 3072.3MB - Virtual size: 3704.0MB

u��2�$1
Size: 787.8MB - Virtual size: 253.2MB

��}�
Size: 2239.5MB - Virtual size: 124.4MB

U��SVW3�
Size: 1.9MB - Virtual size: 816.5MB

�
Size: 2256.0MB - Virtual size: 991.9MB

��@d�
Size: 2240.0MB - Virtual size: 4088.7MB

��s �
Size: 2096.0MB - Virtual size: 1520.0MB

��u�
Size: 3125.9MB - Virtual size: 167.3MB

f��u��
Size: 3772.2MB - Virtual size: 2944.7MB

>��u��
Size: 3772.2MB - Virtual size: 2944.7MB

�� u��
Size: 2048.0MB - Virtual size: 4072.2MB

�@D��;��
Size: 1390.8MB - Virtual size: 260.0MB

f��u9f�\
Size: 54.0MB - Virtual size: 2954.7MB

_��_1
Size: 2742.4MB - Virtual size: 1536.0MB

U��SQ�}
Size: 1636.0MB - Virtual size: 817.9MB

�Y[]��
Size: 818.0MB - Virtual size: 1342.8MB

u�DC�
Size: 2110.8MB - Virtual size: 1461.6MB

�
Size: 5.9MB - Virtual size: 1295.3MB

��]�
Size: 1502.3MB - Virtual size: 3512.3MB

0FK��u
Size: 270.5MB - Virtual size: 2229.7MB

B
Size: 4087.0MB - Virtual size: 74KB