Behavioral task
behavioral1
Sample
0fbc5867469ec974105e91d99e76b86cdf878d11baa667734c912c9595ef2ec3.exe
Resource
win7-20240729-en
General
-
Target
0fbc5867469ec974105e91d99e76b86cdf878d11baa667734c912c9595ef2ec3
-
Size
983KB
-
MD5
08421ba109b6421c1a820d1dc9adafdf
-
SHA1
a5d3ce1fefa1a3e0e24131d8b92a884e60267ce6
-
SHA256
0fbc5867469ec974105e91d99e76b86cdf878d11baa667734c912c9595ef2ec3
-
SHA512
8fecba32ee824a103c44c0b3c21acab36d153587c49431dd6899b6fb0590d74163ff5d2affc2ea31797ba8a0488ff0c112c0810036bee60f3cd488d974aab6f8
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKensz4CUwbPc:GezaTF8FcNkNdfE0pZ9ozttwIR4/
Malware Config
Signatures
Files
-
0fbc5867469ec974105e91d99e76b86cdf878d11baa667734c912c9595ef2ec3.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ