Static task
static1
Behavioral task
behavioral1
Sample
ddb6f7138d9fe0670092d86c49cb65e4b7fc6ef903512d262b7d4e0e821d88ef.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ddb6f7138d9fe0670092d86c49cb65e4b7fc6ef903512d262b7d4e0e821d88ef.exe
Resource
win10v2004-20240508-en
General
-
Target
ddb6f7138d9fe0670092d86c49cb65e4b7fc6ef903512d262b7d4e0e821d88ef
-
Size
1.5MB
-
MD5
9c761736e9aef4ac1b1d59450ea30a05
-
SHA1
7ade5a2ab43ff4af1d596ce8c73a2c8f00aa2cf3
-
SHA256
ddb6f7138d9fe0670092d86c49cb65e4b7fc6ef903512d262b7d4e0e821d88ef
-
SHA512
431f603fb41127ccb806f977fe13c50cd01b93d49976446768aff6c6277b82d2a9594a829c1a1c2ecb8ff6f4a246b25d0538a7709e8606aa7b7ded59238f5644
-
SSDEEP
24576:v7zWktzDLe1+JviXVLCxbvKMcszr6vW2e+wL7V4bZgtWi6hmPftRUNYuEmB5:v79tzG+UXVLCxbvKMcT0/LAZgtWint6L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddb6f7138d9fe0670092d86c49cb65e4b7fc6ef903512d262b7d4e0e821d88ef
Files
-
ddb6f7138d9fe0670092d86c49cb65e4b7fc6ef903512d262b7d4e0e821d88ef.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE