Behavioral task
behavioral1
Sample
567436f2442964d4a97124bc38fac93b5e01ac0109f69c9dd36491ba65d3a899.exe
Resource
win7-20240903-en
General
-
Target
567436f2442964d4a97124bc38fac93b5e01ac0109f69c9dd36491ba65d3a899
-
Size
1.4MB
-
MD5
37ed2d2691f4a8349319b3c9cc8605b3
-
SHA1
507cba8b4bd44d513258551941d471b690d82d61
-
SHA256
567436f2442964d4a97124bc38fac93b5e01ac0109f69c9dd36491ba65d3a899
-
SHA512
6b339c865354be1e374bc45f1d2a748ef5bfe2d3be2b6f72f671419bf451d2759cc39d40221cf8a5ba16e68a2ae303c1e0d8d295cf61daa8a6753571f41cceca
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszQEMrYn6MYj4LaEbsesd:GezaTF8FcNkNdfE0pZ9ozttwIRQxMYeC
Malware Config
Signatures
Files
-
567436f2442964d4a97124bc38fac93b5e01ac0109f69c9dd36491ba65d3a899.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ