Static task
static1
Behavioral task
behavioral1
Sample
defenddel.exe
Resource
win11-20241007-en
General
-
Target
windefend.zip
-
Size
66KB
-
MD5
84ccab1546d70784c3c9ef67b22fec8e
-
SHA1
2362e203cb5686dbf6f3647e5725795aa9330b23
-
SHA256
8c09b582722c0c1775bef0e605969b6662a5ae871f5a41ec92bf9dc7eac35f8b
-
SHA512
1eee3dabc818a5a55d04916ee6e5504ea9aac7d693c23dccb2d90f9d74ba1d4b71f51a14032498f953e44002d707ac0d248b23cd1eba54111f93f173d1f79b09
-
SSDEEP
1536:RHUPRyDF7/HRZn7jCMCxzsBcYyh5kTjrNibzVhL/+:R0py9zjpBcY5Gxhi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/defenddel.exe
Files
-
windefend.zip.zip
-
defenddel.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.... Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE