Behavioral task
behavioral1
Sample
2050d5d3348c84705de5546ecf399f454f3d4076018b3b73114fac61d3ef2790.exe
Resource
win7-20241010-en
General
-
Target
2050d5d3348c84705de5546ecf399f454f3d4076018b3b73114fac61d3ef2790
-
Size
1.4MB
-
MD5
11161cf3ba05803d6768661c28d4493c
-
SHA1
fb666cbf9f3d3a21b5b9a0c764171359fba66e13
-
SHA256
2050d5d3348c84705de5546ecf399f454f3d4076018b3b73114fac61d3ef2790
-
SHA512
afd21a178f123defe6e9cc4428ddb3d26dedcd6f5867a174b68f41a076437e7ecc009a0cb9a611a2f7a72e53719e159aa184dd877930713ddd1c7a7753d1eb24
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5WrmzN5qlxr:GezaTF8FcNkNdfE0pZ9ozttwIRxTzkxr
Malware Config
Signatures
Files
-
2050d5d3348c84705de5546ecf399f454f3d4076018b3b73114fac61d3ef2790.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ