Static task
static1
Behavioral task
behavioral1
Sample
dd78a1d11d63a7e2f6b5a34a58e15ddecb3f389a9f21199258eba72442c8f40b.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dd78a1d11d63a7e2f6b5a34a58e15ddecb3f389a9f21199258eba72442c8f40b.exe
Resource
win10v2004-20240426-en
General
-
Target
dd78a1d11d63a7e2f6b5a34a58e15ddecb3f389a9f21199258eba72442c8f40b
-
Size
68KB
-
MD5
562df5e81ed576ce719315255b634c19
-
SHA1
e2c0ad5748ed2787d833f7f6f81e5a1f0d8e294e
-
SHA256
dd78a1d11d63a7e2f6b5a34a58e15ddecb3f389a9f21199258eba72442c8f40b
-
SHA512
53cf56a99ea23777d3c14939379c675260e5c99ed0a256351bd01c9988b3dd0caf2ac8f8dbd15ace458b35bad1471005523b3822e1c2e79818031e9cf9f1cba4
-
SSDEEP
1536:33SHmLKarIpYeEToa9D4ZQKbgZi1dst7x9PxQ:3kF3pdlZQKbgZi1St7xQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd78a1d11d63a7e2f6b5a34a58e15ddecb3f389a9f21199258eba72442c8f40b
Files
-
dd78a1d11d63a7e2f6b5a34a58e15ddecb3f389a9f21199258eba72442c8f40b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE