Static task
static1
Behavioral task
behavioral1
Sample
4ddc003b290ca5203d75c131445db6e4202a5636839dc424b321158199210d8c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4ddc003b290ca5203d75c131445db6e4202a5636839dc424b321158199210d8c.exe
Resource
win10-20240404-en
General
-
Target
4ddc003b290ca5203d75c131445db6e4202a5636839dc424b321158199210d8c
-
Size
2.3MB
-
MD5
db8b45720c5d13f2b97678a1ae61e444
-
SHA1
53829bd10499206d2a8fa1b3e2532b0bd4792676
-
SHA256
4ddc003b290ca5203d75c131445db6e4202a5636839dc424b321158199210d8c
-
SHA512
34555bac1964a1ba20ccdcdc1455ae23e8edb417130b6502eea801094603b049be172881f121cf67c767fb5f67e4c5a403a8d8ae5a4dd0a81c45162b4b5c1175
-
SSDEEP
49152:kGY5918NqwTEgTco0hJy8VjgyWPNXKLPWOy9d2a:NhT2Iq1WPZnOy9d5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ddc003b290ca5203d75c131445db6e4202a5636839dc424b321158199210d8c
Files
-
4ddc003b290ca5203d75c131445db6e4202a5636839dc424b321158199210d8c.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ryztfavx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
terougzo Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE