Static task
static1
Behavioral task
behavioral1
Sample
dd880a0e4092a05f89925b998934daddff6f2cd141ab49477f81cb8b79003a21.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
dd880a0e4092a05f89925b998934daddff6f2cd141ab49477f81cb8b79003a21.exe
Resource
win10v2004-20240226-en
General
-
Target
dd880a0e4092a05f89925b998934daddff6f2cd141ab49477f81cb8b79003a21
-
Size
694KB
-
MD5
060c81c014ad750b7b3750694750a40f
-
SHA1
0bf730f8c95accd481e6f62b87c5c47807c51b8f
-
SHA256
dd880a0e4092a05f89925b998934daddff6f2cd141ab49477f81cb8b79003a21
-
SHA512
e2f9c006b10b607c26b10246df849f07f2bf5171d7453498b3a519b9bec83cef4cc37e171f833d0a7b363a9057e3b1c0e1b9dcb6cd031d234313666f909fa568
-
SSDEEP
12288:1hJKUNOl7/F5t/96Xy7AF+mgme1n9qQfQeiQxw0jxe1SBFry+rOC8eTPQv35Acfd:lHE5N5jRm2Q0kUFrywO0sP5A4d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd880a0e4092a05f89925b998934daddff6f2cd141ab49477f81cb8b79003a21
Files
-
dd880a0e4092a05f89925b998934daddff6f2cd141ab49477f81cb8b79003a21.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 680KB - Virtual size: 679KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ