Static task
static1
Behavioral task
behavioral1
Sample
ddc17da177ca49cbb4c78fe773f2c1d3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ddc17da177ca49cbb4c78fe773f2c1d3.exe
Resource
win10v2004-20240319-en
General
-
Target
ddc17da177ca49cbb4c78fe773f2c1d3
-
Size
30KB
-
MD5
ddc17da177ca49cbb4c78fe773f2c1d3
-
SHA1
95b7e58e192fdd484909c73b14736270fe0dabaa
-
SHA256
f525e918ca8cfa0bf69e0dbdf68a3943014fbfba88a42a48a991f3a433c40254
-
SHA512
ba278c13d2486970cea9d128423fe6764725754132d2b962deb79e031e28e8aa25a92874c291bc280572e6856efea66524c3bb0d139fe67f810a35418ad09957
-
SSDEEP
768:qQFGZ2RMT3XdnrmXdiaq6IL0oMAkYYFzlkOzj8JLtuF0UI+u:qQFGZ3TZSTkOzIUIB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddc17da177ca49cbb4c78fe773f2c1d3
Files
-
ddc17da177ca49cbb4c78fe773f2c1d3.exe windows:5 windows x86 arch:x86
e547ce7593669d78b55bb099a0e2fc19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
GetQueueStatus
LoadIconA
RegisterClassA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
msacm32
acmStreamOpen
acmStreamSize
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
GetLengthSid
RegDeleteValueA
RegCreateKeyExA
kernel32
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetCPInfo
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ