Static task
static1
Behavioral task
behavioral1
Sample
hpp.exe
Resource
win7-20240221-en
General
-
Target
hpp.exe
-
Size
397KB
-
MD5
3e1aced442830a6434cb57d79740fe11
-
SHA1
41b9b3dca18662aa9affe871672ca4840bfb6236
-
SHA256
0897a07b31a26265bb3b6729518a9c8ddcb3d52926e5f38fb6549dee8f51f427
-
SHA512
60eed6b1b3927f6a89ab528df6e0496299a59d982eb58e085be42eb5a524ebe649a076336309fd1fcab694b06a55796733e1ed3cda9eb8853abf68aef99ea700
-
SSDEEP
12288:F92DLfKLzE/gry85jh2WQOOBkyuVBsnpq2f5XtALB:FkDrUE/gph22O2bnsI85XtW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hpp.exe
Files
-
hpp.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 337KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ