Static task
static1
Behavioral task
behavioral1
Sample
DoSHTTP.exe
Resource
win10-20230220-en
General
-
Target
DoSHTTP.exe
-
Size
80KB
-
MD5
99baa8d24ce0e5ad14b1b9db3cff8482
-
SHA1
e102c9a11af3cce3c3f8fdfec2df303454c8ca4b
-
SHA256
9b679716718621c1fdde442dbeb930c02ae1db6a058b51e4cf767fbf71bf0ca5
-
SHA512
43ae2cd018bee0c3c3b46fb69ce9120b4ab4f57fa22ce350821702fdacab2f97f7e2fa87a0bc15624c4e86905a7f0ddcf33532b70944e54869a026880eb4e89d
-
SSDEEP
1536:h7Ad5zdX6SIY/aCCw9YNqnIgzcfru+9+3Rlt0lAUHqDC8vjlp/fLXPA72:h7w5N/IYCCHowLzKnA3ReAuqD3vRBfTN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DoSHTTP.exe
Files
-
DoSHTTP.exe.exe windows x86
Password: kkijik
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 69KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE