Static task
static1
Behavioral task
behavioral1
Sample
ddd30cb7caf411f421bc752cf6c778cd9d9f1074e74bd90a0cd1d6f85e611b9b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ddd30cb7caf411f421bc752cf6c778cd9d9f1074e74bd90a0cd1d6f85e611b9b.exe
Resource
win10v2004-20230824-en
General
-
Target
ddd30cb7caf411f421bc752cf6c778cd9d9f1074e74bd90a0cd1d6f85e611b9b
-
Size
2.1MB
-
MD5
b120ff45f2e208644122c4a8ceac744d
-
SHA1
196ae2dbfdf56856f8a22e2c8b60652bcb3cc162
-
SHA256
ddd30cb7caf411f421bc752cf6c778cd9d9f1074e74bd90a0cd1d6f85e611b9b
-
SHA512
fa72ed9696e1ff0f4027abf2bec41316a5167ebea43f0808234f9608d539040e181b5d402a81791ae88f5b55a9c736fb168216ae8511cd01297b3092981f81dc
-
SSDEEP
49152:46F9Ig8/ttj3IFNzNHQZnCyRRjYHYty+0pbAakL:46F+//ttj3oSZndnrM+0SakL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddd30cb7caf411f421bc752cf6c778cd9d9f1074e74bd90a0cd1d6f85e611b9b
Files
-
ddd30cb7caf411f421bc752cf6c778cd9d9f1074e74bd90a0cd1d6f85e611b9b.exe windows x86
60c4462e4db06a86b5d178f941c0185d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiOutPrepareHeader
ws2_32
select
kernel32
FileTimeToSystemTime
user32
CloseClipboard
gdi32
GetViewportExtEx
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
VariantInit
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 524KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ