Static task
static1
Behavioral task
behavioral1
Sample
1ddc57a50784afb98253b32f34b497d0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
1ddc57a50784afb98253b32f34b497d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
1ddc57a50784afb98253b32f34b497d0N.exe
-
Size
80KB
-
MD5
1ddc57a50784afb98253b32f34b497d0
-
SHA1
4b7315ccbbe3e20e404fce01c87a7f4ef5e07666
-
SHA256
8b90166517758b7a8568f6ba2e46817a655948933921e49ab5ce1bb4fbd1f410
-
SHA512
c14aaeed6066862b7e370244a1141ab1a80c8e0ce996edfca10c5adf20e48668ea5ea4847d99c888ba94391c48f6cecc46723a5cca54e6537ddcad304858507f
-
SSDEEP
1536:mB+FC9RntfWeoGiPyCHjKDjfQQQtUdtjVD/hz:mB+F8tfPN4yCDKDjfQQQt6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ddc57a50784afb98253b32f34b497d0N.exe
Files
-
1ddc57a50784afb98253b32f34b497d0N.exe.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.bss Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewSec Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE