Static task
static1
Behavioral task
behavioral1
Sample
ddcd72a0e7e3df32d9a35d934f623540N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ddcd72a0e7e3df32d9a35d934f623540N.exe
Resource
win10v2004-20240802-en
General
-
Target
ddcd72a0e7e3df32d9a35d934f623540N.exe
-
Size
5.8MB
-
MD5
ddcd72a0e7e3df32d9a35d934f623540
-
SHA1
151d995c1191fe88eecd1c6e1628bf72a6aecbc5
-
SHA256
7c17227bab9a7efaf7637bc2a6114b7b22640d05e1f192ef13a676bfb12017bc
-
SHA512
d608fc054b7e128d4827fa7aa4451bdf41547809be3385b76042eb176ac123b6f525c57a342f542b8a075408db93bf1f629e96597356cfb1a5e569793d25ccf3
-
SSDEEP
98304:dcRMYGSEe1sOnua0TicFgjcZbQijdvVGbAVOV1GvYjgPWQDXAk3k6LZoXZLGZPXK:38FsOY+cFgjcZ86D2A0+zBXV06L2GZPK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddcd72a0e7e3df32d9a35d934f623540N.exe
Files
-
ddcd72a0e7e3df32d9a35d934f623540N.exe.exe windows:6 windows x86 arch:x86
df75dfe1338f32d227b9feb6025c20c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
GetStringTypeW
OutputDebugStringW
LCMapStringW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
LeaveCriticalSection
GetConsoleMode
IsDebuggerPresent
GetModuleHandleW
TlsAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
WriteFile
GetModuleFileNameW
GetStartupInfoW
DeleteCriticalSection
GetStdHandle
GetCurrentThreadId
SetFilePointerEx
WriteConsoleW
CloseHandle
DeleteFileA
TlsFree
GetThreadTimes
CreatePipe
GetFileType
FindClose
GlobalFree
SetEndOfFile
SetCurrentDirectoryA
FlushFileBuffers
GlobalUnlock
CompareStringW
GetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
SetCommState
GetWindowsDirectoryA
WaitForSingleObject
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcess
GetCommState
GetLocaleInfoA
TlsGetValue
HeapReAlloc
GetCommandLineW
CreateThread
LocalAlloc
SetStdHandle
FindFirstFileA
Beep
TlsSetValue
EnterCriticalSection
EncodePointer
DecodePointer
GetLastError
RaiseException
RtlUnwind
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapFree
HeapAlloc
GetProcessHeap
SetLastError
CreateFileW
user32
EndPaint
SetTimer
MapDialogRect
SendDlgItemMessageA
IsIconic
SetCapture
IsZoomed
CreateAcceleratorTableW
ShowCaret
RegisterWindowMessageA
GetDoubleClickTime
InsertMenuItemW
CreateDialogIndirectParamA
GetKeyboardLayout
CheckMenuRadioItem
AppendMenuW
SetScrollPos
IsWindow
PostMessageA
RemoveMenu
DispatchMessageA
CheckRadioButton
DeferWindowPos
ScrollWindowEx
GetSystemMetrics
SetCaretPos
SetWindowTextA
EndMenu
SetMenuItemInfoA
LoadCursorA
GetDlgItemTextA
DialogBoxParamA
ToUnicode
DrawFrameControl
TranslateMDISysAccel
CopyRect
GetMessageTime
SetKeyboardState
GetParent
GetClientRect
SendMessageA
DrawEdge
gdi32
GetBitmapBits
SetLayout
SetTextColor
MaskBlt
CreateFontA
UnrealizeObject
DeleteObject
PolyPolyline
SetMapMode
GetCharWidthA
SelectPalette
GetCharABCWidthsFloatA
SetViewportExtEx
CreateICA
SetWinMetaFileBits
ExtTextOutA
CloseEnhMetaFile
EqualRgn
BitBlt
Arc
GetDeviceCaps
CreateBitmap
CombineRgn
Rectangle
ExtSelectClipRgn
IntersectClipRect
GetPixel
GetBrushOrgEx
CreateEnhMetaFileW
advapi32
RegEnumKeyA
GetLengthSid
RegSetValueExA
CopySid
RegOpenKeyA
Sections
.text Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ