Static task
static1
Behavioral task
behavioral1
Sample
dd2bdb615eff30354ba6a94d817c183fddb311b865bf3e97c370e402acc789fa.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dd2bdb615eff30354ba6a94d817c183fddb311b865bf3e97c370e402acc789fa.exe
Resource
win10v2004-20240802-en
General
-
Target
dd2bdb615eff30354ba6a94d817c183fddb311b865bf3e97c370e402acc789fa.exe
-
Size
1.2MB
-
MD5
b0171a35d97747c25578e7e4ce4e49ec
-
SHA1
aadf5fcd323f63505f993108e700a24361ce1b82
-
SHA256
dd2bdb615eff30354ba6a94d817c183fddb311b865bf3e97c370e402acc789fa
-
SHA512
033039c1dd16fbea103de65a62918363603bcfcb42e9ccf473573c07a20971049a99c763d8a5a7abee659c215c1c51f3674aea3de1087bc9e5c06b3fb3a74873
-
SSDEEP
24576:5yeATtmuSHfF1JR95/3wKgV/1vA3Yy4WQOJ:5MAF1H95/3avA+WjJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource dd2bdb615eff30354ba6a94d817c183fddb311b865bf3e97c370e402acc789fa.exe
Files
-
dd2bdb615eff30354ba6a94d817c183fddb311b865bf3e97c370e402acc789fa.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 881KB - Virtual size: 881KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ