Static task
static1
Behavioral task
behavioral1
Sample
PPDInstaller.exe
Resource
win10-20230220-en
General
-
Target
PPDInstaller.exe
-
Size
93KB
-
MD5
d2716a0796607a4850754a39f1b06a7b
-
SHA1
eaff6ce097758f9ba4afd41fde0e8782880a24df
-
SHA256
bb8a3c08a3c906c7af97e7e16ab8dcd07c71cd6f10acbcc5d07ca2d58484abe7
-
SHA512
deffb793035d90f25dc0697fd6d8b60fe2642edbe4f82b8b03f97cd80bccded4a2bc2c666c8186f3d64346308368553d7e9d69af7b324fa29c35925198a46034
-
SSDEEP
1536:dRdrW6TR1BbXau2AaTfR8rMS1E4ixvsyKv9Yn3QVo4rhLFu8GKv9NU:ntW6TRHbXW98rMS1E4ixkyKC3QxFFiKo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PPDInstaller.exe
Files
-
PPDInstaller.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ