Static task
static1
Behavioral task
behavioral1
Sample
ddb4a7f6e444ba72319b70bb87b313b2bd6d6015b1bb023a7d8ae0135eb81565.exe
Resource
win10v2004-20240426-en
General
-
Target
ddb4a7f6e444ba72319b70bb87b313b2bd6d6015b1bb023a7d8ae0135eb81565
-
Size
1.8MB
-
MD5
951b11806c20c122c0b8bb4614eb3653
-
SHA1
def53bc8d852f620684d88336e14d9d3b167f48f
-
SHA256
ddb4a7f6e444ba72319b70bb87b313b2bd6d6015b1bb023a7d8ae0135eb81565
-
SHA512
d18829cfb7907fb270c6f9eddcefbe13e56b1283d6ef0ca1d74016b0c6525c8338668bef20de089e6b97bd048ba5f15c1c83d4525af5b27deb37c25028ab4e38
-
SSDEEP
49152:56l3ixgkGuDI6OqgfA9qhTiF8GwZMh8v5DSMymIfZOfZOAp:5M3UgFaTgfA+kwiSvh2vfZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddb4a7f6e444ba72319b70bb87b313b2bd6d6015b1bb023a7d8ae0135eb81565
Files
-
ddb4a7f6e444ba72319b70bb87b313b2bd6d6015b1bb023a7d8ae0135eb81565.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rzkmjtxx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mfyrhwel Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE