Static task
static1
Behavioral task
behavioral1
Sample
ddf1d77f9e6337e9e4c6fb1905893d35.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ddf1d77f9e6337e9e4c6fb1905893d35.exe
Resource
win10v2004-20240226-en
General
-
Target
ddf1d77f9e6337e9e4c6fb1905893d35
-
Size
174KB
-
MD5
ddf1d77f9e6337e9e4c6fb1905893d35
-
SHA1
a211eea23f52deef10b4cf58b9c4ece2d3a1cc76
-
SHA256
101433179746ce0dbb9825ea6844c801c0066750742de4d3414edb98ebcb1ff0
-
SHA512
9bbc790d78e398173be76bbdf26f1a7d1884eea94352269e7e5c9ccfc1d85fab07ea22374841f24678d00499b220140ccacef1dd1e8f02058bec5764deccddfd
-
SSDEEP
3072:u7hxUI5Gx4oWzzzAvbQoRVWepHbSLacGAV1wlr/oAL5DoEzv5j:ugdxnioRVWe9byaoSlr/oANsEz5j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf1d77f9e6337e9e4c6fb1905893d35
Files
-
ddf1d77f9e6337e9e4c6fb1905893d35.exe windows:4 windows x86 arch:x86
3aa92fa22b88f1efcf67c0610fef9792
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetConsoleCP
HeapReAlloc
GlobalUnlock
CloseHandle
GetStdHandle
CompareFileTime
SetConsoleCP
WaitForMultipleObjects
SuspendThread
InterlockedExchange
GetAtomNameA
GetModuleHandleA
GetVersion
GetTickCount
GetCommandLineA
LoadLibraryExA
VirtualProtect
lstrlenA
WaitForSingleObject
GetSystemDefaultLangID
user32
DragObject
FillRect
SetScrollInfo
CreateMenu
InvertRect
IsDialogMessage
DialogBoxParamA
GetKeyboardLayout
SetPropA
EnableScrollBar
GetKeyState
InsertMenuA
DispatchMessageA
SetWindowPos
CreateIcon
GetCursorInfo
GetDlgItem
DestroyMenu
FindWindowA
DrawCaption
advapi32
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegEnumKeyA
RegQueryInfoKeyA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ