Static task
static1
Behavioral task
behavioral1
Sample
ddd6454061dc0946629f7a230d7288b8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ddd6454061dc0946629f7a230d7288b8.exe
Resource
win10v2004-20240226-en
General
-
Target
ddd6454061dc0946629f7a230d7288b8
-
Size
334KB
-
MD5
ddd6454061dc0946629f7a230d7288b8
-
SHA1
52a17652cbce175b18f2bc5f84c5fdf3ac00bd33
-
SHA256
46a9e24bf368286feea4a31f92e22f5e3a359f4962e2eb03ffc82d5a80a69f12
-
SHA512
ec8b7e4b69581fc42368de202d54e6de34c4499e277c3fe4aa32b38a73ae9ca83ad4bd6374a361b5993c9dbcb7d3a16df87d5fe1ccefa28e7b4056f361e29054
-
SSDEEP
6144:YoIPAvcqQpGAK+EdIL3ePLWCr0g8sdh6oRR+9Pb4NDCKRm9bb3YN9zYjdnGexn3G:YoWuxmK6CrGsHxi2T19zYFLxK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddd6454061dc0946629f7a230d7288b8
Files
-
ddd6454061dc0946629f7a230d7288b8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
text Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
M3 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE