Static task
static1
Behavioral task
behavioral1
Sample
1ddb43e8bae2915f5f9662d17126a4f2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ddb43e8bae2915f5f9662d17126a4f2.exe
Resource
win10v2004-20231222-en
General
-
Target
1ddb43e8bae2915f5f9662d17126a4f2
-
Size
266KB
-
MD5
1ddb43e8bae2915f5f9662d17126a4f2
-
SHA1
9641666d49fa4d14f996c1fc6417ec4161bc4735
-
SHA256
d63dfc1d68093723904cfcb1b19c0dcf97fdb38b5ea260057670ad1c99ae6de8
-
SHA512
f80c88311c49ae72b68355e0a5a03240fc23d3f288f13b041d991bb0587c465a6fac31a28cf3898b5bd0e251a3474a19a75e917d4454d6d43a40cb6a0197ae39
-
SSDEEP
3072:9EpqcCpSVv1dD6hWFTmTPnmPlV/tHl7lHR68yZRYSSbxIugRI3MZ7U5ur:9EqcCSv1d+7j8rK8ybYSSbSrRB7U5ur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ddb43e8bae2915f5f9662d17126a4f2
Files
-
1ddb43e8bae2915f5f9662d17126a4f2.exe windows:1 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 940B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE