Static task
static1
Behavioral task
behavioral1
Sample
SSD-Z_v16.09.09b_Chs.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SSD-Z_v16.09.09b_Chs.exe
Resource
win10v2004-20231222-en
General
-
Target
SSD-Z_v16.09.09b_Chs.exe
-
Size
1017KB
-
MD5
33a2ec6c2fbc0620960fff8e529ebbe0
-
SHA1
8769ce73b76192b7ffdcccd05e68eed9d4f6cf27
-
SHA256
b558686aa36f7fbf471cf58e37e67b69cb639fe4dde41a0eaef91768b3369f34
-
SHA512
f31a8f83c372e1dc23adbace904e027df6aa74a4ceb1cb2c6057db00f02199492e16091dbe9edda0ba83c40c72c062d023a6f2d1c37a875ce3f0b765f4d91ebf
-
SSDEEP
24576:f1gfdIAiHOfgDb9vrEKKm4XDvyQ7G1jy:9glSDKB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SSD-Z_v16.09.09b_Chs.exe
Files
-
SSD-Z_v16.09.09b_Chs.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 595KB - Virtual size: 595KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 385KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ