Behavioral task
behavioral1
Sample
dc2ea38da98e9e47c55494bdda737049c4e297a29efc1c7a354a44cc147c826b.exe
Resource
win7-20240708-en
General
-
Target
dc2ea38da98e9e47c55494bdda737049c4e297a29efc1c7a354a44cc147c826b
-
Size
1.8MB
-
MD5
3f71194ec3c7c0cde7569af7cd4fa3d6
-
SHA1
8ca075e75bb00410fd4580b2b6a2f15dc9d805f1
-
SHA256
dc2ea38da98e9e47c55494bdda737049c4e297a29efc1c7a354a44cc147c826b
-
SHA512
3adb0e75c43ed8d6ac92fdb71cb6ea6419e9612cf596c1810f0aa3531296c59b621e2ccb2927c4660f8ae201a70b64ae74e0a861d777783b5316d1bf68c50c16
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRRR/1fGkv+ihQ:GemTLkNdfE0pZyA
Malware Config
Signatures
Files
-
dc2ea38da98e9e47c55494bdda737049c4e297a29efc1c7a354a44cc147c826b.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ