Static task
static1
Behavioral task
behavioral1
Sample
dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9.exe
Resource
win10v2004-20240426-en
General
-
Target
dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9.exe
-
Size
788KB
-
MD5
487fcc8992b8e6a123556ec594815348
-
SHA1
3addf3f428df7f5adf6e5417c307c31513dfa56a
-
SHA256
dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9
-
SHA512
ed34c12154151285756f0cb01a8324c8e4bf8cafdbc6d3d22676631a120ff99b83bed87f6970a83ad3db4d19368bbc8fbb6c98ca776d915f25602d27e94772c8
-
SSDEEP
12288:0L0uT00m+xItGS2eB2CgzitJrZegit+AzUJHCC/VxONCiCzlyv/bOCEQsQXe8wQ3:0s09F+ACiiPrzi4AoxZ62zlyLOC1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9.exe
Files
-
dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 775KB - Virtual size: 774KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ