Static task
static1
Behavioral task
behavioral1
Sample
dd161e1720ce8f78637767825109e68a7e1df74ceb1f97fc6b504833d4a69537.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
dd161e1720ce8f78637767825109e68a7e1df74ceb1f97fc6b504833d4a69537.exe
Resource
win10v2004-20240426-en
General
-
Target
dd161e1720ce8f78637767825109e68a7e1df74ceb1f97fc6b504833d4a69537
-
Size
93KB
-
MD5
7de7cd2977f123c684684378c31a5549
-
SHA1
091745cdb25c6c9c5137b40dd36b480644e4ee10
-
SHA256
dd161e1720ce8f78637767825109e68a7e1df74ceb1f97fc6b504833d4a69537
-
SHA512
f8b250b0d860a51168bc0fa398b36f7bf451b01b03784fb52a729021f5546be6c94f2946b4862c0de2c6239cb9207746bd5b0963b9b283a4f4bd55578635ebe5
-
SSDEEP
1536:Qlbh7Q/WZDNN99xBnO1Sg8dz6TP/DwcYmc06b777S/eo0oTcjiwg58:ke/WVNN99xYP8dzk/RYd06o0ogY58
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd161e1720ce8f78637767825109e68a7e1df74ceb1f97fc6b504833d4a69537
Files
-
dd161e1720ce8f78637767825109e68a7e1df74ceb1f97fc6b504833d4a69537.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ