Behavioral task
behavioral1
Sample
aca4cacf1b34c1e372ca4ea54a3e39705a40a013263d3eabef4a13a4bce3a264N.exe
Resource
win7-20240903-en
General
-
Target
aca4cacf1b34c1e372ca4ea54a3e39705a40a013263d3eabef4a13a4bce3a264N
-
Size
1.7MB
-
MD5
ee1e70a94e30876d9358a24d0c1cc360
-
SHA1
33ce2631f925bbf29d69cf11e7c6a274c08a30fa
-
SHA256
aca4cacf1b34c1e372ca4ea54a3e39705a40a013263d3eabef4a13a4bce3a264
-
SHA512
0fd4043dbc803cab18978c69fcc19ba44b820cf72faa94c808618e33758845edc4fcbfae8697a81a49eb47b44693dbc55ee490545f060581098c45251e662541
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9oztFwIHT5JbVY4CkvPGPSbZ:GemTLkNdfE0pZah
Malware Config
Signatures
Files
-
aca4cacf1b34c1e372ca4ea54a3e39705a40a013263d3eabef4a13a4bce3a264N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ