Behavioral task
behavioral1
Sample
c9fa6fbf4827a0f1a8ff41466355930354db00a845c8511b2665033aca4d661f.exe
Resource
win7-20240903-en
General
-
Target
c9fa6fbf4827a0f1a8ff41466355930354db00a845c8511b2665033aca4d661f
-
Size
1.0MB
-
MD5
666b8b537f2c6b94d12c071241f99d73
-
SHA1
4bf334c0ed262d9f8d4472b67cfa165735e1e788
-
SHA256
c9fa6fbf4827a0f1a8ff41466355930354db00a845c8511b2665033aca4d661f
-
SHA512
82577754bdaa625c1df54b7eda57d6cacdbae3a6d5bc7eab7e71cdf8fa6ea25e3d1e9d5bc51e903846d8e175ffe068e934b12240bc645b4e69d9946675484081
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/ccJBL/a:GezaTF8FcNkNdfE0pZ9ozttwIRxi
Malware Config
Signatures
Files
-
c9fa6fbf4827a0f1a8ff41466355930354db00a845c8511b2665033aca4d661f.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ