Static task
static1
Behavioral task
behavioral1
Sample
dd0386faa9c76a2c62b79ba9f3ea2eda393a9cedc635d2a20825d27d4f8e6437.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd0386faa9c76a2c62b79ba9f3ea2eda393a9cedc635d2a20825d27d4f8e6437.exe
Resource
win10v2004-20240802-en
General
-
Target
dd0386faa9c76a2c62b79ba9f3ea2eda393a9cedc635d2a20825d27d4f8e6437
-
Size
8.0MB
-
MD5
ac25e3e0c3d74dfc501bdceb5704fb3d
-
SHA1
69a0701e03b0d3b992cca395a1f35fe9a78b00d5
-
SHA256
dd0386faa9c76a2c62b79ba9f3ea2eda393a9cedc635d2a20825d27d4f8e6437
-
SHA512
70ee09e475cbc429ddc74536cc891cc3435bb12693c4f5e19f6ea92bcc222416e94f36a0609b6ca9a9abf4a0a7bc47b894fde3a49745d6444e424d2ed2be1fdd
-
SSDEEP
196608:+53xiZ1keJb2YBxSMDfbs5nEJT3cOp1weLk2v+6PvK8w/Y:+pE1keJdIMDTFcOs2v+OcQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd0386faa9c76a2c62b79ba9f3ea2eda393a9cedc635d2a20825d27d4f8e6437
Files
-
dd0386faa9c76a2c62b79ba9f3ea2eda393a9cedc635d2a20825d27d4f8e6437.exe windows:5 windows x86 arch:x86
99ab075aae6c254bbac1c209af007b2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysReAllocStringLen
advapi32
RegFlushKey
user32
EmptyClipboard
kernel32
GetVersion
GetVersionExA
HeapAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
gdi32
StretchDIBits
version
VerQueryValueA
mpr
WNetGetConnectionA
ole32
CoUninitialize
comctl32
ImageList_Write
wininet
InternetOpenA
shell32
SHGetMalloc
comdlg32
GetOpenFileNameA
oleacc
LresultFromObject
winmm
timeGetTime
wsock32
listen
gdiplus
GdipGetImageHeight
Sections
&X<!1S(6 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
*?(-oh#5 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
C:es9+eT Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a!B7DU78 Size: - Virtual size: 29KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
,8B6w#>u Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2yNXk^4i Size: - Virtual size: 60B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dQF:5l\6 Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
iBPCq:W' Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
5f-Yn'^w Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kgDqu\lx Size: - Virtual size: 10.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
'In!dbfn Size: - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Xti/H`9h Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ