Behavioral task
behavioral1
Sample
9ac6308e911212e9e159676716540585d39a888486375f322aa6e58807f3ba53.exe
Resource
win7-20240903-en
General
-
Target
9ac6308e911212e9e159676716540585d39a888486375f322aa6e58807f3ba53
-
Size
1.5MB
-
MD5
a9e0fa91d4f4f9d588ec26a8764b7ae9
-
SHA1
53d0985dba9b0cef7d2cc9cb56dfeecee422eeae
-
SHA256
9ac6308e911212e9e159676716540585d39a888486375f322aa6e58807f3ba53
-
SHA512
5a894618eb9ec4580c81345b4152e802c118a2f70a8ea7f31a32bca58f8e276d871660fa61e3b745fdc81040137d89bc6f6fcd9fb40417cc30171740ce310ad7
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZPrU63:GemTLkNdfE0pZyn
Malware Config
Signatures
Files
-
9ac6308e911212e9e159676716540585d39a888486375f322aa6e58807f3ba53.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ