Static task
static1
Behavioral task
behavioral1
Sample
3dd21cc603f2ab3d6a385af41ab42313d38ab73c1d1e68dec0f7694b62fea0dd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3dd21cc603f2ab3d6a385af41ab42313d38ab73c1d1e68dec0f7694b62fea0dd.exe
Resource
win10v2004-20231215-en
General
-
Target
3dd21cc603f2ab3d6a385af41ab42313d38ab73c1d1e68dec0f7694b62fea0dd
-
Size
310KB
-
MD5
cd587bdac20d1014afb7181b91924cda
-
SHA1
3b2b440f17ab1ba9db54432344c163a9b8f49fc5
-
SHA256
3dd21cc603f2ab3d6a385af41ab42313d38ab73c1d1e68dec0f7694b62fea0dd
-
SHA512
f9e14056fca99b831850028c87e18c3b0886eff908401806ebc5fbbfe65326f51039d3f4825ffe9c310d18e5e1e8db531702064ccd941600d6a83faa5f919f63
-
SSDEEP
6144:ktgdmqrkLLJSsa7No3mhKGqf711aNHL1zt5LPn7cCALCivIn9tqSVn:QgdbkvJSs53rfR1aNr1zt5LPnoCtiQnb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dd21cc603f2ab3d6a385af41ab42313d38ab73c1d1e68dec0f7694b62fea0dd
Files
-
3dd21cc603f2ab3d6a385af41ab42313d38ab73c1d1e68dec0f7694b62fea0dd.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 208KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 51KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 14KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE