Static task
static1
Behavioral task
behavioral1
Sample
dda6cf92a70e46e6abc7fc1760df4997d577fbf12c73cfd21f2f38ae142ca07c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dda6cf92a70e46e6abc7fc1760df4997d577fbf12c73cfd21f2f38ae142ca07c.exe
Resource
win10v2004-20240709-en
General
-
Target
dda6cf92a70e46e6abc7fc1760df4997d577fbf12c73cfd21f2f38ae142ca07c
-
Size
403KB
-
MD5
677b6385754961342add6242c2803b8b
-
SHA1
811800e463b71fd199b8c212b2ecf0fae32853a0
-
SHA256
dda6cf92a70e46e6abc7fc1760df4997d577fbf12c73cfd21f2f38ae142ca07c
-
SHA512
6e2ec0784c66c287b01801200c9a29bf2d2364d722e50fa4146db5458dd1d66fb4fc894c6f3659abf73566d83a5b17e35e98de0151cccb61cdf61c9f22fe1934
-
SSDEEP
6144:agHDKp9kfh7jeJpzTJnV9FRtjwaRoa/HW5ATX3t9Ax6gbo6Fq13Y/Jlu9Qhlcxzx:2kfViJpzTJnRf1W5Ar9yno6cklu+vLA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dda6cf92a70e46e6abc7fc1760df4997d577fbf12c73cfd21f2f38ae142ca07c
Files
-
dda6cf92a70e46e6abc7fc1760df4997d577fbf12c73cfd21f2f38ae142ca07c.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.riynqdo Size: 315KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rjznaor Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wasqngb Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voojeuj Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rhjtwwu Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qkgwvin Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kiuskfk Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mmzpafz Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.conhigo Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.achgiqe Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hxhwziw Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tphgody Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mpzkgby Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE