Behavioral task
behavioral1
Sample
aee4ddb3ba2956bc37ed1ea534f6e1f07259a9682b208061a270f5b72835e459.exe
Resource
win7-20240903-en
General
-
Target
aee4ddb3ba2956bc37ed1ea534f6e1f07259a9682b208061a270f5b72835e459
-
Size
1.6MB
-
MD5
746c85824f42b41689f2a52715abd9b7
-
SHA1
989439b27a0475f0601fecea6f3cf1e9481863f7
-
SHA256
aee4ddb3ba2956bc37ed1ea534f6e1f07259a9682b208061a270f5b72835e459
-
SHA512
ae6ef8f706cc1841f4a56147dbfdd79f6580485c3dfd41644ab24ef3f66b1144558a9fae16f417a083119e8fb579e59c75a9e1dd00bbaef01d249292af284af5
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQhj:GemTLkNdfE0pZyQ
Malware Config
Signatures
Files
-
aee4ddb3ba2956bc37ed1ea534f6e1f07259a9682b208061a270f5b72835e459.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ