Behavioral task
behavioral1
Sample
5e8d111447e06f3d05eb041150bffd6a7f86b32651002031b09684abd0e6da7e.exe
Resource
win7-20240903-en
General
-
Target
5e8d111447e06f3d05eb041150bffd6a7f86b32651002031b09684abd0e6da7e
-
Size
1.6MB
-
MD5
0a4dbe96f7bc2c2550f509a65b1a429c
-
SHA1
7d1dab1f6e4bf6ae3753c02d85249ad809fea626
-
SHA256
5e8d111447e06f3d05eb041150bffd6a7f86b32651002031b09684abd0e6da7e
-
SHA512
63c10f70c7969162b6ebca733d6fb0c6a4c2548c640f2c25321496ccd0f068b44dc9938b6889e93f0183480429341e569015be68d892b3a7660544b09e332650
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxTzkx7kvxIWx3JXIGke:GemTLkNdfE0pZyt
Malware Config
Signatures
Files
-
5e8d111447e06f3d05eb041150bffd6a7f86b32651002031b09684abd0e6da7e.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ