Static task
static1
Behavioral task
behavioral1
Sample
ddb36290f3f0f81fa79aeba00675538337c8b25809667992757c762996618b4c.exe
Resource
win7-20231129-en
General
-
Target
ddb36290f3f0f81fa79aeba00675538337c8b25809667992757c762996618b4c
-
Size
348KB
-
MD5
172245c442d5be0629ff2d64ebf20062
-
SHA1
d0aa7f87ed5e9d2087245edb806333e530e907e9
-
SHA256
ddb36290f3f0f81fa79aeba00675538337c8b25809667992757c762996618b4c
-
SHA512
f7406f970fa05178341dd88c695843b1f523df41c9f4c28d73f4136ca03f5e3714cfb7c8a3e7646c27f96f04651fcd1ba3f072b6f6fe12555c137ae527b5cb37
-
SSDEEP
6144:9cm7ImGddXvJuzyy/SfVFKpU/sien7NuOpo0HmtDKe0wKyKqiOfm8RCfDK4TrHr:/7TcBuGy/Sa+/sie0OpncKe/KFBOfmzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddb36290f3f0f81fa79aeba00675538337c8b25809667992757c762996618b4c
Files
-
ddb36290f3f0f81fa79aeba00675538337c8b25809667992757c762996618b4c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.didat Size: 40KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ