Static task
static1
Behavioral task
behavioral1
Sample
RIDDHH0J.EXE.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
RIDDHH0J.EXE.exe
Resource
win10v2004-20230703-en
General
-
Target
RIDDHH0J.EXE.exe
-
Size
36KB
-
MD5
d6a2fe42c4b65a84325aa486d87b698e
-
SHA1
030dd854073de331986143bdd908afa6c00a3766
-
SHA256
c24ab1c89e1f391f8c0393bd26701946a6636dff772df867aff644159764e278
-
SHA512
d42b05f4e8b7d90e360620b8253ad37b5cf138d5f1b45e36fa65afe1548f4357ae50de41a21da7edaf62cb583f99d024dadb823772129110f6b03ff9bc0f711a
-
SSDEEP
768:fJUUE5Zuq5Tllmu24Ra2DovIieNhIPVQPa9EB8B1:eUE5fTll92m7ov0oW6E81
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RIDDHH0J.EXE.exe
Files
-
RIDDHH0J.EXE.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ