Behavioral task
behavioral1
Sample
ad80c79dbe8fd60b8b4957d1f454306e9f82c9a93ec95ad0d8ad7fdb6db07b6b.exe
Resource
win7-20240708-en
General
-
Target
ad80c79dbe8fd60b8b4957d1f454306e9f82c9a93ec95ad0d8ad7fdb6db07b6b
-
Size
1.6MB
-
MD5
f47cff9042f588eafe4fc6cbc97d12b7
-
SHA1
49784c1cceaf6773cd692324cad5c6bd6ba059a7
-
SHA256
ad80c79dbe8fd60b8b4957d1f454306e9f82c9a93ec95ad0d8ad7fdb6db07b6b
-
SHA512
3091737eb72341fe277945523c77d57710ae8b3e012e2c8c28c652c113e852dc5b751884e48f322d57d5713a2297ff8379b28b8c151601f659a7a9352c76e911
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQba/:GemTLkNdfE0pZyJ
Malware Config
Signatures
Files
-
ad80c79dbe8fd60b8b4957d1f454306e9f82c9a93ec95ad0d8ad7fdb6db07b6b.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ