Behavioral task
behavioral1
Sample
Ddos.zip
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
Ddos/Loader.exe
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Ddos/main.exe
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
Ddos/scr/Read.me.txt
Resource
win11-20240802-en
General
-
Target
Ddos.zip
-
Size
13KB
-
MD5
921d674bf5ab9dc56cbd6c51859d1b6b
-
SHA1
ca928c9b60924d1b84a5b2e78fc23cee1d753120
-
SHA256
13df706a312bb4146ebd9a1ad13c313880c6c6fd8506b02f1b09ecf869852485
-
SHA512
18802314eb64d4a7d5131aacc48ff4b498d9bf991d1bc3e15b3bb8b49792eb412583af9fd6e0b1d895f90608338a71baf0a8f781a2887111b3e1464d60290bf2
-
SSDEEP
384:Rc/KrweKXzbSNGLlk3sXAolLJZsxVJZ6bkwUok4G4yAWM6:Rc/Q8XSI2cXAGJZsxbEv7kT4UM6
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Ddos/Loader.exe upx static1/unpack001/Ddos/main.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ddos/Loader.exe unpack001/Ddos/main.exe
Files
-
Ddos.zip.zip
Password: trojan
-
Ddos/Loader.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Ddos/main.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Ddos/scr/Read.me.txt