Behavioral task
behavioral1
Sample
392d9afbb4a19397a84804f9846a2bb6f431cc2657ccf73cb9ab2f9f0e1b7958.exe
Resource
win7-20240903-en
General
-
Target
392d9afbb4a19397a84804f9846a2bb6f431cc2657ccf73cb9ab2f9f0e1b7958
-
Size
1.6MB
-
MD5
c9413a76b8263cdd568425beb948f92e
-
SHA1
42272cca197676ce5f63fe8273385f1cac01c44b
-
SHA256
392d9afbb4a19397a84804f9846a2bb6f431cc2657ccf73cb9ab2f9f0e1b7958
-
SHA512
e614684c8053887726da589f607e73756dd2b441e21a4e9032f6c282744ddcae1068a68f325f371d15f5987c3f184d29fa0ff7c73a717172e2023e08bebb3c61
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQb+:GemTLkNdfE0pZyB
Malware Config
Signatures
Files
-
392d9afbb4a19397a84804f9846a2bb6f431cc2657ccf73cb9ab2f9f0e1b7958.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ