Behavioral task
behavioral1
Sample
2844-30-0x0000000003320000-0x0000000003561000-memory.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2844-30-0x0000000003320000-0x0000000003561000-memory.exe
Resource
win10v2004-20241007-en
General
-
Target
2844-30-0x0000000003320000-0x0000000003561000-memory.dmp
-
Size
2.3MB
-
MD5
865e8a4c83e7fbd34cabe55f36e9cb6f
-
SHA1
8ff1b82c8835e3b790e8afc56a510ae00195ad08
-
SHA256
8fddfcb10bc033daaeceb8411bfd71ad0a4c57ba0f60b0e85613bf98bff2d189
-
SHA512
2761cedfa2928c5ea2092b9e99ddbac167bd19ec364053713d7ffd35064b55908888e1e513308a7d2137b1412f5da36042c1429036c03c2090e709524b7d29fc
-
SSDEEP
3072:JPrmSRVD/jl71ZDFjP764CrVqPUjutF6yJDI4OLXwZB7sq4UredsagzGMJ:VzD/PjTTyVqsju7DI4OLXw794UF
Malware Config
Signatures
Files
-
2844-30-0x0000000003320000-0x0000000003561000-memory.dmp.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ