Static task
static1
Behavioral task
behavioral1
Sample
RIDDHH0J.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
RIDDHH0J.exe
Resource
win10v2004-20230703-en
General
-
Target
23ef9e1871478c0d5c2fc5a9f_JC.img
-
Size
1.2MB
-
MD5
6234113d4fb26221ad909b86d4c99293
-
SHA1
377af5c3f02ce395ab094f85efa4dcc1a037b30a
-
SHA256
23ef9e1871478c0d5c2fc5a9f91d4114a3aa7e9814ef8f15738d5b59770de2d6
-
SHA512
61eadf530e82b540c01e54d4c560c512d727b8194893df6068532037f6e7dd0850951001a23db18b0f493776a410aa25dfd0827078267fba15901bc3e231866b
-
SSDEEP
768:jJUUE5Zuq5Tllmu24Ra2DovIieNhIPVQPa9EB8B:qUE5fTll92m7ov0oW6E8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RIDDHH0J.EXE
Files
-
23ef9e1871478c0d5c2fc5a9f_JC.img.iso
-
RIDDHH0J.EXE.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ