Static task
static1
Behavioral task
behavioral1
Sample
2ddc6a65a5aa335810c955debc825140N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ddc6a65a5aa335810c955debc825140N.exe
Resource
win10v2004-20240802-en
General
-
Target
2ddc6a65a5aa335810c955debc825140N.exe
-
Size
472KB
-
MD5
2ddc6a65a5aa335810c955debc825140
-
SHA1
dbed5030239596556e8d520a55f16be257280156
-
SHA256
e829bfccc343ff19c11d27c502460c451de4df9ec84ce7703398165a4fb565d7
-
SHA512
8502c3bca9462047dc8e87f8e0857c69314ea201db26da4af69a2db8dc7f4afa1309189d32ae03c56fed9ebaa6088e9e2dd911603cfe3777decc5cd39356fbb6
-
SSDEEP
6144:pfmkgiPA6R7P4fVfteSKfOM1AGeKZwwA:1SiPyZo9A2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ddc6a65a5aa335810c955debc825140N.exe
Files
-
2ddc6a65a5aa335810c955debc825140N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ