Behavioral task
behavioral1
Sample
f5261c28314335090f487241753d113e01527106f3636b098109d507229dba02.exe
Resource
win7-20240903-en
General
-
Target
f5261c28314335090f487241753d113e01527106f3636b098109d507229dba02
-
Size
1.0MB
-
MD5
31bcbd26ef6ee2d78a15fb2d2e2ac92f
-
SHA1
87c674274afc3e9d6ba7476db8f2480621d11fb3
-
SHA256
f5261c28314335090f487241753d113e01527106f3636b098109d507229dba02
-
SHA512
c5b56763040d08ff09a3b0601897b4ef1e3111a1e3b4ae9cb84447ed89f99e4bbaf2190506296fabc20019fe5fb8021824d704d9a39cf0a51f9f4b5ac7a8b41b
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszaDw4B0PSQn861:GezaTF8FcNkNdfE0pZ9ozttwIRakG0R
Malware Config
Signatures
Files
-
f5261c28314335090f487241753d113e01527106f3636b098109d507229dba02.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ