Static task
static1
Behavioral task
behavioral1
Sample
dd2f76ce80da3bbff89c24ff9d9e3f31d9467fb91f1c840c19ceb5f7c8f99a11.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral2
Sample
dd2f76ce80da3bbff89c24ff9d9e3f31d9467fb91f1c840c19ceb5f7c8f99a11.exe
Resource
win11-20240704-en
General
-
Target
dd2f76ce80da3bbff89c24ff9d9e3f31d9467fb91f1c840c19ceb5f7c8f99a11
-
Size
211KB
-
MD5
af934e5a29a912a5eb28899316508ed0
-
SHA1
8b7e62aebf92f2f13fd7c901408cec240da87ab9
-
SHA256
dd2f76ce80da3bbff89c24ff9d9e3f31d9467fb91f1c840c19ceb5f7c8f99a11
-
SHA512
0af301b8979815fdc453c9a1470cc3c091cef7fb2c80b3b9459ae39bbdafba0bfdcdede505318048affa8702ddfd02818b794c106ff77affd7ae92c5ce445149
-
SSDEEP
3072:Uvx8hlBwuIFMl2sbk/KPs2rx/SmRPW2nKtwc3A/:Qx89wuIFMI2G2V/JRLgP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd2f76ce80da3bbff89c24ff9d9e3f31d9467fb91f1c840c19ceb5f7c8f99a11
Files
-
dd2f76ce80da3bbff89c24ff9d9e3f31d9467fb91f1c840c19ceb5f7c8f99a11.exe windows:5 windows x86 arch:x86
4bdd01efb3f9cfa329abd02683ca7679
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveVectoredExceptionHandler
IsBadStringPtrW
SetEndOfFile
FindResourceW
CreateDirectoryW
WriteConsoleInputA
GetModuleHandleW
VirtualFree
LoadLibraryW
GetModuleFileNameW
GetACP
ReplaceFileA
GlobalUnlock
GetLastError
SetLastError
GetProcAddress
CreateFileA
OpenMutexA
LocalAlloc
GlobalGetAtomNameW
EnumResourceTypesW
CancelIo
OpenFileMappingW
GetWindowsDirectoryW
HeapReAlloc
HeapSize
GetStringTypeW
MultiByteToWideChar
AttachConsole
GetDateFormatW
LCMapStringW
RtlUnwind
Sleep
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
RaiseException
user32
GetKeyboardLayoutNameA
SetMessageExtraInfo
GetCaretPos
InsertMenuItemW
CharUpperBuffW
DdeKeepStringHandle
GetClassInfoW
advapi32
GetLengthSid
ole32
CoRevokeClassObject
CoMarshalHresult
winhttp
WinHttpWriteData
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 35.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ