Static task
static1
Behavioral task
behavioral1
Sample
DD.exe
Resource
win10v2004-20240802-en
General
-
Target
DD.dll
-
Size
9.2MB
-
MD5
b4e9e353268fc4b5ac94491a6f7719d5
-
SHA1
7616a3ebf1cf69197958869755e143cb4ba10758
-
SHA256
579b09c3d9e849740a25d902dd4a3186e48cd035b5b140eefd6b1463afa91898
-
SHA512
fd2cee0701f918d51103e9230d683fd83c5cf8fb311453749eac76d473b0cc46644cd0ee9cca4b1f98e4b7088cc8c2d29cbc92779f0ac11e12e05185f3b00036
-
SSDEEP
196608:DH7ydILuHWBLyOlJXfk/XUVvlNLXKpkA5ScX+sQ35c2UhayOlJOvGakA5ScX+sQK:DWm/BL3XfkfUHUha3OvGn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DD.dll
Files
-
DD.dll.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 8.9MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 225KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ