Behavioral task
behavioral1
Sample
c2411b577706e7189f3808d3c62fea70N.exe
Resource
win7-20240903-en
General
-
Target
c2411b577706e7189f3808d3c62fea70N.exe
-
Size
4.9MB
-
MD5
c2411b577706e7189f3808d3c62fea70
-
SHA1
f264156064787f0e317c666762da0bdd9a6479eb
-
SHA256
a6bc8329dbcd972fe19de39df40bf564093bf68075ab976fe21dc869cf348af1
-
SHA512
cc1a115888a442414d8248943476b990879c563fa0490bf413c81f907eaf732eebb1e74f6c585013bd4f132da8f92a0effba9fb3e1d7800f66a8112c4b133a7e
-
SSDEEP
12288:xcwPNnS+1zhcUzs61o257IWjJRWSS/TibOR52amK8wYXXQz+ERv1z:xK+sUT11IsDHS/TjOZXX2+Gvp
Malware Config
Signatures
Files
-
c2411b577706e7189f3808d3c62fea70N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 187KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 42KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ