Static task
static1
Behavioral task
behavioral1
Sample
dd13e86dcf2e3203d522fc43b6cd287d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dd13e86dcf2e3203d522fc43b6cd287d.exe
Resource
win10v2004-20230220-en
General
-
Target
dd13e86dcf2e3203d522fc43b6cd287d.exe
-
Size
591KB
-
MD5
dd13e86dcf2e3203d522fc43b6cd287d
-
SHA1
85834e6054260ed1e9e994d3ee0312708f874b08
-
SHA256
a98cb609a48a550a1afedb557a9519289fe8d51755a16864617612e16f7b0982
-
SHA512
26566f5f5e111e88280a29557288a0dbb56b912007f9ce04bef4cbef6421243a4f8b9aaf34ccc84adb6119e5288b941151f3226835002dd799a9265fbcc6f8f8
-
SSDEEP
12288:dz/5optkW/MQ+GKA6T4O8P94o3SCjXBjSFreOrbNj5AyPvr:dzmpyWn+GKA60O69X3SCjXZtOX3h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd13e86dcf2e3203d522fc43b6cd287d.exe
Files
-
dd13e86dcf2e3203d522fc43b6cd287d.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 581KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ