Behavioral task
behavioral1
Sample
555a30b8129e35351fd72bc89a98af7c_bitpaymer_dridex_JC.exe
Resource
win7-20230712-en
General
-
Target
555a30b8129e35351fd72bc89a98af7c_bitpaymer_dridex_JC.exe
-
Size
84KB
-
MD5
555a30b8129e35351fd72bc89a98af7c
-
SHA1
fec9200def2ddc3b81b1e011d12045c31114ccf3
-
SHA256
7c7a47becff5ab6332ff43dd4b6abffd44e0b89f4fac8479cbc7536ed86d94e0
-
SHA512
316f51101a2ccbb84831777cea8e83d46582e116cf9d9ffc97f8adfe5ceda4394b58c8b2a1f779fa485ea7af99022421222d192e09817ac57914d52f7477af02
-
SSDEEP
1536:hP7NWStzZOd+aErXtzJEbHaslV+PZsp+TfC2V8Dq2da9aM1g+j8LZQc/D3OpQ3G/:J7NWStzZOd+aErXtdEbHZlV+PZsp+TfQ
Malware Config
Extracted
dridex
5.196.15.119:443
46.105.131.72:443
157.7.163.144:3389
199.119.78.9:4143
Signatures
-
Dridex family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 555a30b8129e35351fd72bc89a98af7c_bitpaymer_dridex_JC.exe
Files
-
555a30b8129e35351fd72bc89a98af7c_bitpaymer_dridex_JC.exe.exe windows x86
21626130d9d56e7fc3c160241339a20d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringW
Sleep
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ