Dynamic Analysis Report
Created on 2022-08-05T18:11:00+00:00
a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe
Windows Exe (x86-32)
Remarks (1/1)
(0x0200000E): The overall sleep time of all monitored processes was truncated from "5 minutes" to "10 seconds" to reveal dormant functionality.
| Filters: |
There are no files for this filter
There are no files in this analysis
| File Name | Category | Type | Verdict | Actions |
|---|
| C:\Users\RDhJ0CNFevzX\Desktop\a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | Sample File | Binary |
Malicious
|
|
| MIME Type | application/vnd.microsoft.portable-executable |
| File Size | 399.50 KB |
| MD5 |
3333e40e61ff33675c26e7a712a7808d
|
| SHA1 |
7e314834674c7bf514f68790a0e88b014e9115a4
|
| SHA256 |
a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3
|
| SSDeep |
12288:SAAqMeiD2Fr/cJZtfc9GVM5tQHOBR/F+L412g:xAFDem3EMWPQHOL9X
|
| ImpHash |
dc0513b2e8e866ceee30009dd51093dc
|
Memory Dumps (37)
| Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | YARA | Actions |
|---|---|---|---|---|---|---|---|---|---|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Relevant Image |
|
32-bit | 0x00417800 |
|
|
| buffer | 1 | 0x00643858 | 0x0066CB87 | First Execution |
|
32-bit | 0x00643858 |
|
|
| buffer | 1 | 0x00580000 | 0x005B7FFF | First Execution |
|
32-bit | 0x00580000 |
|
|
| buffer | 1 | 0x00580000 | 0x005B7FFF | Content Changed |
|
32-bit | 0x005804F6 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x0040CD2F |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x0040E1D8 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x0041087E |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x0041388D |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x00411CBA |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x004145D2 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x00417625 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x0040FA58 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x004019F0 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x00407270 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x0040223B |
|
|
| buffer | 1 | 0x02350000 | 0x0237AFFF | Reflectively Loaded .NET Assembly |
|
32-bit | - |
|
|
| buffer | 1 | 0x025A0000 | 0x025C8FFF | Reflectively Loaded .NET Assembly |
|
32-bit | - |
|
|
| buffer | 1 | 0x0259E000 | 0x0259FFFF | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x00194000 | 0x0019FFFF | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x001F1EC8 | 0x001F1F47 | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x001F1F50 | 0x001F274F | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x00580000 | 0x005B7FFF | First Network Behavior |
|
32-bit | 0x00580920 |
|
|
| buffer | 1 | 0x00643858 | 0x0066CB87 | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x006B22A0 | 0x006B231F | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x02141018 | 0x021410BB | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x021417A8 | 0x02141836 | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x02141840 | 0x021418F3 | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x02141D30 | 0x02141DBC | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x02142110 | 0x0214219E | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x02142490 | 0x02142CB3 | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x02150048 | 0x02163D69 | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x02163D78 | 0x021A3D99 | First Network Behavior |
|
32-bit | - |
|
|
| buffer | 1 | 0x021A3DA8 | 0x021CE1B5 | First Network Behavior |
|
32-bit | - |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | First Network Behavior |
|
32-bit | 0x00402403 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x004104E9 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Content Changed |
|
32-bit | 0x00414661 |
|
|
| a4bac13abfd454b26ddd32a25d87080e7e4bf8b6a9e85e7e91736b3f944565c3.exe | 1 | 0x00400000 | 0x00470FFF | Process Termination |
|
32-bit | - |
|
|
| b14bcf7e766be0d5ea1f045fa63bc03a3d5c18687539e66f42a3051e5ea8d0af | Downloaded File | Text |
Clean
|
|
| MIME Type | text/plain |
| File Size | 14 Bytes |
| MD5 |
3ef2dc2ead803750e71a9e1aa2cdc958
|
| SHA1 |
7098b9a4017107563f330678349c8e80b8e10ae6
|
| SHA256 |
b14bcf7e766be0d5ea1f045fa63bc03a3d5c18687539e66f42a3051e5ea8d0af
|
| SSDeep |
3:eubLXj:euLXj
|
| ImpHash | - |
