Static task
static1
Behavioral task
behavioral1
Sample
ddd836ea468481ba21bdf18c02793b16.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ddd836ea468481ba21bdf18c02793b16.exe
Resource
win10v2004-20240226-en
General
-
Target
ddd836ea468481ba21bdf18c02793b16
-
Size
29KB
-
MD5
ddd836ea468481ba21bdf18c02793b16
-
SHA1
6b7687089dd1b3329e6a9a25a4d7898502a11c29
-
SHA256
1cd34b47452e0ef454db8c09ead4c9972379f422bed443fccdf1d015fc89fb77
-
SHA512
da609b08f999a8a1fc9f0bd46aea7c8ab0c34df265cb8abca636c6c5613bf3883d5fda592ffbb25457779a61ddf08cc16d433322f599b382a5473ba8f41caf18
-
SSDEEP
384:t7GUbCyD3qntWLh3+WxCw2gWU38VFadNPKjkcLCkVEPa8F9hpVBk3Tdpg7g+Y:VrO+qtE+WxC6Wi8VFKG+F9TVMdpy4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddd836ea468481ba21bdf18c02793b16
Files
-
ddd836ea468481ba21bdf18c02793b16.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ