Behavioral task
behavioral1
Sample
9bd18ea576d122cc9d8cc6a7dedfb34cfaa4b64c1fc0d504668e8dedbf278c51.exe
Resource
win7-20240221-en
General
-
Target
9bd18ea576d122cc9d8cc6a7dedfb34cfaa4b64c1fc0d504668e8dedbf278c51
-
Size
1.1MB
-
MD5
020960a9cf7f48ff1826359fa1cad85a
-
SHA1
4d843f80cc40e970531127fb671d81020d4f7732
-
SHA256
9bd18ea576d122cc9d8cc6a7dedfb34cfaa4b64c1fc0d504668e8dedbf278c51
-
SHA512
8bb47961f998e101de3df60efa7154a52cd1fd1b251b2027de0f0287142e50c61223f3fa35bfe2c3c9b4d7e0f307c2cbb9c6d26ebb493a9c5d39d8835739f133
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbBwlKenUT5Ja5ugsz7HYItyF:GezaTF8FcNkNdfE0pZ9oztFwIHT5JaoK
Malware Config
Signatures
Files
-
9bd18ea576d122cc9d8cc6a7dedfb34cfaa4b64c1fc0d504668e8dedbf278c51.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ