Static task
static1
Behavioral task
behavioral1
Sample
2dd55886abcbbdf046de4a541725b683cf01e1a32a67535fda33c0222f813863.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2dd55886abcbbdf046de4a541725b683cf01e1a32a67535fda33c0222f813863.exe
Resource
win10v2004-20231023-en
General
-
Target
2dd55886abcbbdf046de4a541725b683cf01e1a32a67535fda33c0222f813863.exe
-
Size
147KB
-
MD5
4ba5a583fabda02fe40f7c60a8615633
-
SHA1
e3045864364a894ae1faf2a5675dccd61904beb8
-
SHA256
2dd55886abcbbdf046de4a541725b683cf01e1a32a67535fda33c0222f813863
-
SHA512
5d5d94aa0a17bcbc1aa3b957cce95e7ba95d10611b4f350d31dc815f3270338c3ee28ef558dd3163353c4acd6881dc95be3bb0bb03258fb11e3b36f436a10754
-
SSDEEP
3072:J9kWa09PeoDegR6M0vbhSUi22z2Vj+P8zmYxnnouZ:JGWasPeoi3U/Cl+PMPx/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dd55886abcbbdf046de4a541725b683cf01e1a32a67535fda33c0222f813863.exe
Files
-
2dd55886abcbbdf046de4a541725b683cf01e1a32a67535fda33c0222f813863.exe.exe windows:5 windows x64
62c1a01a2b872706805ed1dd2b4cf2ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
ExitThread
CreateProcessA
Sleep
InitializeCriticalSection
DeleteCriticalSection
ReadFile
CreatePipe
PeekNamedPipe
WaitForSingleObject
user32
MessageBoxA
shlwapi
StrStrIA
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
Sections
.text Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wwmotk Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE