Static task
static1
Behavioral task
behavioral1
Sample
0dd998971ba9d582208b7578b1c6686a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dd998971ba9d582208b7578b1c6686a.exe
Resource
win10v2004-20231215-en
General
-
Target
0dd998971ba9d582208b7578b1c6686a
-
Size
187KB
-
MD5
0dd998971ba9d582208b7578b1c6686a
-
SHA1
3293bc33bf6c5b628d8a7d9b86c1c2a63f3dea71
-
SHA256
17d0bc76c9820049b5d9095938d1723abc4e80bd4090977d0f1327653a27a5aa
-
SHA512
623be83854062ef9d0088a66258f2b1768161e0f022c028e51730546d93bdf9b68edff3eb627e087ee8de7b9ad10052ac8acb25a5732cb72714b24157c8f0e3d
-
SSDEEP
3072:5AIgfOf4LFoFn4xs663FAmvtfGjGHYmkc6iWkekBhiv7JCxfoptuJgRVeyW:GvXx43Fhzd1AVCVoXxney
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd998971ba9d582208b7578b1c6686a
Files
-
0dd998971ba9d582208b7578b1c6686a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
dqwo0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dqwo1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dqwo2 Size: 105B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE