Static task
static1
Behavioral task
behavioral1
Sample
ddcdfeac7ea5ee59db8aefb00c1c5ce2c079a903273685d3b25ec2214ae8962a.exe
Resource
win10v2004-20240709-en
General
-
Target
ddcdfeac7ea5ee59db8aefb00c1c5ce2c079a903273685d3b25ec2214ae8962a
-
Size
1.8MB
-
MD5
4be92cfe9e6fffa2d34a959a588d7709
-
SHA1
87e7313b81cba4340882d664524dbb929b8208bf
-
SHA256
ddcdfeac7ea5ee59db8aefb00c1c5ce2c079a903273685d3b25ec2214ae8962a
-
SHA512
7a894758662b056c4ccaf7b92837ceceed0137177782ab6e9cecebf0f3418c3f8b6d9601235b0926d0d028707be507340f3f5250d9cc19d0c607d509b2d99a3c
-
SSDEEP
49152:mfnoW6BtsPqDf4G5FZj+4Rq6HJI2rsODIyuOAYnXDfBdDkD:mvT6BtZso7jpa2rsODoYnzbD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddcdfeac7ea5ee59db8aefb00c1c5ce2c079a903273685d3b25ec2214ae8962a
Files
-
ddcdfeac7ea5ee59db8aefb00c1c5ce2c079a903273685d3b25ec2214ae8962a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gzhvxywt Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nntxlovm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE