Static task
static1
Behavioral task
behavioral1
Sample
3ddd70c84a9ec071b512b06856d3671215d3e42854a7e0a8df1a357c8b0a2040.exe
Resource
win7-20240419-en
General
-
Target
3ddd70c84a9ec071b512b06856d3671215d3e42854a7e0a8df1a357c8b0a2040
-
Size
2.3MB
-
MD5
bc65c00ac467a16ea04730cc9d3bec2f
-
SHA1
6453823b40cba73746b2bf0580b0835dfaf8182f
-
SHA256
3ddd70c84a9ec071b512b06856d3671215d3e42854a7e0a8df1a357c8b0a2040
-
SHA512
b7a7e60186fe117f2273c7298a7a668b5432b3a05363a52ae2be0af6c3ebd72971eeecccb2480f41d3d4bf1f37f7e7acb29912be4519c79f5332156fb14b09cc
-
SSDEEP
49152:5GY5918NqwTEgTcQqlnKxbyXyXtQL5jDt9/ws2oIy2N4cojcECI2BDo:2hTPinKxbyiXSH9/ioHknrBM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ddd70c84a9ec071b512b06856d3671215d3e42854a7e0a8df1a357c8b0a2040
Files
-
3ddd70c84a9ec071b512b06856d3671215d3e42854a7e0a8df1a357c8b0a2040.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dhabstvu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ednzuegp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE