Static task
static1
Behavioral task
behavioral1
Sample
dd7872c3741fbb3902071f9a43cb42232c7b15ecc648f23d01d9800b1ec2d4fa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dd7872c3741fbb3902071f9a43cb42232c7b15ecc648f23d01d9800b1ec2d4fa.exe
Resource
win10v2004-20240419-en
General
-
Target
dd7872c3741fbb3902071f9a43cb42232c7b15ecc648f23d01d9800b1ec2d4fa
-
Size
101KB
-
MD5
d9802288ad0c21fc42808fe5417fd06f
-
SHA1
62946142ae2e2a726b5245891874f08fe4748170
-
SHA256
dd7872c3741fbb3902071f9a43cb42232c7b15ecc648f23d01d9800b1ec2d4fa
-
SHA512
060b7b45fb0d2dc15c4ca7d5b854afd9f001a2451bbba6331cc654e700f186d313296b5d16f35337be8dfdccf04594b022cb77cd90e2b4be50a7e9212a598c1d
-
SSDEEP
1536:1IaqOLeMVla2vL4teTQ4k01ICgrs5eN37hqfnLpqAD9R7B:KVMXaeLEik1gAV1qPQAD5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd7872c3741fbb3902071f9a43cb42232c7b15ecc648f23d01d9800b1ec2d4fa
Files
-
dd7872c3741fbb3902071f9a43cb42232c7b15ecc648f23d01d9800b1ec2d4fa.exe windows:4 windows x86 arch:x86
29d29ff575fc25e61c4120b766a45f11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
mscms
InstallColorProfileA
GetStandardColorSpaceProfileA
UninstallColorProfileA
DisassociateColorProfileFromDeviceW
SetColorProfileElementReference
SetColorProfileHeader
GetCountColorProfileElements
AssociateColorProfileWithDeviceA
GetColorProfileElement
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 91KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ