Static task
static1
Behavioral task
behavioral1
Sample
ddfc226180d19aa860f81b888702f0b37e1f59478c4c0baaf7ec97d85da380c6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddfc226180d19aa860f81b888702f0b37e1f59478c4c0baaf7ec97d85da380c6.exe
Resource
win10v2004-20241007-en
General
-
Target
ddfc226180d19aa860f81b888702f0b37e1f59478c4c0baaf7ec97d85da380c6.exe
-
Size
634KB
-
MD5
1e3a75a6d284c8e0f63ea91b1aae69a2
-
SHA1
e12e0f7a3bef74c9da3ba2e92fdbde73b97f403c
-
SHA256
ddfc226180d19aa860f81b888702f0b37e1f59478c4c0baaf7ec97d85da380c6
-
SHA512
6f0ab96b0b0e2a016b6e8c56db308cc748f6b86784a5fb443b26d13b5b6c7232a4934106acfc73cc55f8b03e124042d9fe99da2e4920b08f2b98030da6b59209
-
SSDEEP
6144:pGxhLzIXav5wzU3oHY59KCvkg9yDUo1BfcnCMk+DI3D8+4Z2wwwxItGrKsPE7Gl:YMeis5X8gchB8CQGA+8OtGrh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddfc226180d19aa860f81b888702f0b37e1f59478c4c0baaf7ec97d85da380c6.exe
Files
-
ddfc226180d19aa860f81b888702f0b37e1f59478c4c0baaf7ec97d85da380c6.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 459KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ