Static task
static1
Behavioral task
behavioral1
Sample
hh.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
hh.exe
Resource
win10v2004-20230220-en
General
-
Target
hh.exe
-
Size
69KB
-
MD5
5dd2ec77f57dd3576965815cd0698a3f
-
SHA1
c3f089b46e28b6d5bd016ef041a713325837ade2
-
SHA256
568e8b06d410321543e9299e9f30eb3e4fbad2b55ef31daeb64a1187e5494d16
-
SHA512
b592f99496ac014242cd6bf60c3d4a80f9f6e9fbddc1a6d966a03df5962a76da487268adb43107bd26bfb4193e402787a7d653a003514ae5a4b4e904953ef9d5
-
SSDEEP
1536:VyYJk7nyT/rVpX0S4sF/g5e1tOQ18WLFfeYv4P6IqattdjV+6WR9dXxy:9+nybRpX0S4YsutOa8Ye+4P6wtTj29dA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hh.exe
Files
-
hh.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ