Static task
static1
Behavioral task
behavioral1
Sample
ddafbeeb15070b020ea14e709ce5c6e17ac8b01db177c463b7cceeb39c8c0cd0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
ddafbeeb15070b020ea14e709ce5c6e17ac8b01db177c463b7cceeb39c8c0cd0.exe
Resource
win10v2004-20231023-en
General
-
Target
ddafbeeb15070b020ea14e709ce5c6e17ac8b01db177c463b7cceeb39c8c0cd0
-
Size
6KB
-
MD5
098c9cadaec76e3cc21caa6b1962de0f
-
SHA1
4b0ecae164c50750c3ed530f7977ae74def2cf26
-
SHA256
ddafbeeb15070b020ea14e709ce5c6e17ac8b01db177c463b7cceeb39c8c0cd0
-
SHA512
0eada9ac8bd024d0eb0328c59897db2761552d488ad3af359adf9b6a87ee0befc861f615b871b630b57094dce5dc187c2f1ac3275e46f81c2561fa3cedad4e89
-
SSDEEP
192:oDj//P8OAmDx3ehIj6oEhMZoTTHRNbSXkeQa:q/kq1OY6na+HTgF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddafbeeb15070b020ea14e709ce5c6e17ac8b01db177c463b7cceeb39c8c0cd0
Files
-
ddafbeeb15070b020ea14e709ce5c6e17ac8b01db177c463b7cceeb39c8c0cd0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE