Static task
static1
Behavioral task
behavioral1
Sample
dddc265dc6fe0edf23da60cd299ecbe1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dddc265dc6fe0edf23da60cd299ecbe1.exe
Resource
win10v2004-20240226-en
General
-
Target
dddc265dc6fe0edf23da60cd299ecbe1
-
Size
33KB
-
MD5
dddc265dc6fe0edf23da60cd299ecbe1
-
SHA1
bc2830b989139ae977d424ac6972c60e269b8a78
-
SHA256
8536373a969252500076dba22e0a952e2a8cd71bd1fbb0cecb2940d3fa9e0415
-
SHA512
8279d71e3b01d903e9e201e986b448c272e81811a4d7eb22dea3c5fe00f1a07e35b1e57881b7c46758342e731912fd1a86c356de1df8cc478093181d36bdbabf
-
SSDEEP
768:gxtnM1e01iUPdi5RoRUQXXP4CtnObbWEt1VcbknR:gxi1eY5Fi5OBPbxOV1+Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dddc265dc6fe0edf23da60cd299ecbe1
Files
-
dddc265dc6fe0edf23da60cd299ecbe1.exe windows:4 windows x86 arch:x86
37864467a36d50fb91fb94ca0b7c38c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW
msvcrt
_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf
shell32
SHLoadOLE
StrStrIA
DuplicateIcon
Sections
.text Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE