Behavioral task
behavioral1
Sample
343f49262c3b0929abb2ec993352e4cf9bfbe0bcef6d85305f16a61d401e4602.exe
Resource
win7-20240704-en
General
-
Target
343f49262c3b0929abb2ec993352e4cf9bfbe0bcef6d85305f16a61d401e4602
-
Size
1012KB
-
MD5
2e1f3272f063ba01f7174e85c696e972
-
SHA1
359b813d2b8717b70c8af957e1cc76fab472ce88
-
SHA256
343f49262c3b0929abb2ec993352e4cf9bfbe0bcef6d85305f16a61d401e4602
-
SHA512
19fa43549f58f0279156fdb2dbf815ca64f06fecbfbd307739f3ae5dfb904ab6afe870c73e9c666b8012cb216820f24a445dcc98e8c4a4632bc6c8bb358ba5f3
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbBwlKenUT5J9SczmrnI2Cb:GezaTF8FcNkNdfE0pZ9oztFwIHT5J940
Malware Config
Signatures
Files
-
343f49262c3b0929abb2ec993352e4cf9bfbe0bcef6d85305f16a61d401e4602.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ