Static task
static1
Behavioral task
behavioral1
Sample
ddeb957be8fec1c4ae7260a917857f07dc3fdcc833f29442d54954af81dd0891.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ddeb957be8fec1c4ae7260a917857f07dc3fdcc833f29442d54954af81dd0891.exe
Resource
win10v2004-20240419-en
General
-
Target
ddeb957be8fec1c4ae7260a917857f07dc3fdcc833f29442d54954af81dd0891
-
Size
951KB
-
MD5
b1a8440dfb34f7984da4d86b93682dad
-
SHA1
ac045265b1f072f3fd2b22de07a5009fa74a7346
-
SHA256
ddeb957be8fec1c4ae7260a917857f07dc3fdcc833f29442d54954af81dd0891
-
SHA512
8a5d2104e135d7aae0d386632183dd306febd3ccd97fb61c653d589670e833675414e7d87d9c7cf318db1d5cedbf4f0acd61612b954ff47a58a538e6f7d846b4
-
SSDEEP
24576:z2wTMUBGxR6OZJAbkJOoOv4R0xGJU/uz79hTjiS:NIUCmbkJaQQt/KBhl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddeb957be8fec1c4ae7260a917857f07dc3fdcc833f29442d54954af81dd0891
Files
-
ddeb957be8fec1c4ae7260a917857f07dc3fdcc833f29442d54954af81dd0891.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ