Behavioral task
behavioral1
Sample
13c1e2f29de55aff524a6a1a667ace7c977e576ca9d963f24e348b386caccaa1.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
13c1e2f29de55aff524a6a1a667ace7c977e576ca9d963f24e348b386caccaa1.exe
Resource
win10v2004-20240611-en
General
-
Target
13c1e2f29de55aff524a6a1a667ace7c977e576ca9d963f24e348b386caccaa1.exe
-
Size
1.8MB
-
MD5
c15e113d7b7f5af5baa78fe3cef90670
-
SHA1
a187239ad6c73afb71230a543a27d6b3dd3a4088
-
SHA256
13c1e2f29de55aff524a6a1a667ace7c977e576ca9d963f24e348b386caccaa1
-
SHA512
d5a568000339892a6ec9a0ef29b8186a5a84e8e4afba1ec749f418998c9d6f23f265c06403363a1223437a391c4ef1f362e3aa8011bf83742475a964b34af44b
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9oztFwIHT5JbVY4CkvPo7p6vmk0+:GemTLkNdfE0pZab
Malware Config
Signatures
Files
-
13c1e2f29de55aff524a6a1a667ace7c977e576ca9d963f24e348b386caccaa1.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ