DenDen[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
DenDen.exe
Size 832KB
Sample261102-pklhmab15n
SHA256 85e957161c267ee946440721484bd9398f211285480782e1690234dd86510243
MD5 19b62cfa6ff00cc39d1633a46dd52111
SHA1 c39e79fe7d56a6944e5bce23770780c1c2534be7
SHA512 7b04775a9968ec29726456d2f4eff25c863077cc2bfce9205de70517a3782eabb9153516888d1b31edd8091a9ac9501fcd90aeb3e1d29f0aad392c500cd6da3d
SSDEEP 12288:TCrclpVZcmCVTZctQxIa2VHQqHbeOc22iv+EwPtrp1gl5TAIsIhs:fcPelmITs
TLSH
T16005B69EB77250C0C1D522F29359873ED8FCAAC2899116DB0D9A1F3AD843C2BDD85376
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DenDen.exe

File Explorer

DenDen.exe

.exe 832KB

DenDen.exe

SHA256 85e957161c267ee946440721484bd9398f211285480782e1690234dd86510243
MD5 19b62cfa6ff00cc39d1633a46dd52111
SHA1 c39e79fe7d56a6944e5bce23770780c1c2534be7
SHA512 7b04775a9968ec29726456d2f4eff25c863077cc2bfce9205de70517a3782eabb9153516888d1b31edd8091a9ac9501fcd90aeb3e1d29f0aad392c500cd6da3d
SSDEEP 12288:TCrclpVZcmCVTZctQxIa2VHQqHbeOc22iv+EwPtrp1gl5TAIsIhs:fcPelmITs
TLSH
T16005B69EB77250C0C1D522F29359873ED8FCAAC2899116DB0D9A1F3AD843C2BDD85376
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

531584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

AUCManager AUCWrap AccelerationFDeadline AccordionPepperBack ActivationJointTunnel ActivationRepair ActiveAttestation ActiveBurst ActiveCE ActiveSpring AdapterHandler AdapterManager AdaptiveEncapsulate AdaptiveProcessor AdaptiveRadius AggregatorDecoderBandwidth AggregatorRatingFeedForward AlbedoHead AmbassadorOperatorDSCP AmbassadorTTLEdge AnnounceExtrapolateBackoff ApplyForceAnimateSwipe ApplyTorque ArchiveInterpolateSkip Attend AttendHaptic AttendNextHop AttendStandardizeECT AudienceSetDrag BTreeFlush BTreeMistEpoch BackendViewportCron BackpropHandshakeStroke BackpropRotateBackoff BadgeReassemble BaggageReshard BandwidthMask BatchEgressECT BatchProcessor BatchTurbulence BatchVortex BeamForcefulRotate BiasGesture BindingBackBlueGreen BindingProcessor BindingRepair BindingViewportMigrate BiomeColliderElevation BiomeQuorumRecall BlendEmitterEnclave BlendLambdaExchange BlockFeedForwardRagdoll BloomCuckooBack BlueGreenResponse Blur BlurClassifyQuery BorderBackprop BorderDropped BorderEpochDetect Boxcast BoxcastEmitter BreadcrumbRenderWaypoint BreakerDamper BreakerPong BreakpointSample BreakpointStroke BreakpointTokenStartup BrokerBlur CEFocus CEHandshake CanaryDSCPFlip CancelBreakpoint CancelInsets CancellationFreeze CancellationSchedulerIntrospect CancellationValueNavmesh CardPressed CarouselStepChallenge CellPingSidecar ChallengeExchange CheckboxClassifyLease ChunkRolloutOrchestration ChunkTTL CircuitManager ClassZoomedBinding ClassifyFixedUpdateShadow CloudFixedUpdateHead Cluster ClusterEdgeFilter ClusterPad ClusterQuery ClusterRigidbody CnameDeployment ColdBandwidth ColdStandardizeQuery ColliderExpire ColliderProject ColumnDaemonReorder ColumnFixedUpdate ComboboxFilter CompactMirror CompactOrchestrateElevation CompactionBoxcastAdjacency ConcludeSafeAreaMinibatch CongestionActivation ConstraintProject ConstraintResidual ConstraintStep ConsumerApplyTorqueSkip CorridorHeuristicFilter CostCircuitGraceful CronWarm CuckooEncapsulateRotate CuckooTTLRoute DaemonExponential DaemonPrecision DeadlineAccept DeadlineOrchestrateAdaptive Decapsulate DecapsulatePadding Dehydrate DehydrateIntrospect DemultiplexSidecar DeploymentDisabled DeploymentPerplexityMipmap DeploymentRadius Dial DialBounce DialBreaker DialEpoch DialInitVelocity DialPacketLoss DialRespawnKey DiffFill DiffSpread Disabled DisabledRenegotiatePerplexity Discover DownstreamCluster DragDialActivation DragSpawn DrawerDiscoverLOD DuplicateProcessor ECNBaggageMirror ECNECT ECNGraph Ease EdgeProcessor EgressRoomECN ElevationCEPool EmbedBreakpoint EmbedExpirePositional EmbedPurgeResidual EmbedRollout EmbeddingPool EmissiveDewLogit EmitterLeaseRebalance EmitterResolver EncapsulateMigrateGradient EnclaveRank EncoderInterpolateRagdoll EntropyConstraintHeuristic EphemeralBackoff EpochDuplicate EvaluateNormalizeRadius EvaluateResponse ExchangeProcessor ExchangeProvider ExchangeReconcile ExtrapolateHaptic FIntrospectDeadline FadeBoxcastSpring FadeInterpolateEpoch FailoverMeasurement FamilyFixedUpdate FeedForwardExpire FeedForwardRougeSafeArea FieldGesture FillColliderFreeze FillHelper FilterBlur FlexMipmapNavmesh FlipBlurFill FlushNonce FlushRebuildHaptic FocusHeartbeatChallenge FollowerResponseSpan ForwardConstraint FragmentLOD FreezeBackprop FreezeToken GapProcessor GestureMask GlossHoverResponsive GoodputFade GracefulChunk GradientElevationVacuum GradientResolver GradientToken GraphPurge GrassEaseKinematic GravityNsAnisotropy GreedyMirror HairShadow HandshakeOrchestrateTTL HandshakeScheduler HapticViewportActivation HeadNextHop HeightmapApplyTorqueRadius HeightmapRecommend Hydrate HydrateBreakpoint HydrateSampleRecall HyperClamp ImpulseEvictGradient ImpulsePong ImpulseSafeArea InferenceBackoffPositional InferenceStartup InitVelocity InsetsAdjacencyChunk IntrospectSaltRetry IterationEphemeral IterationRecursorInsets JitterCircuit JitterMAP JitterQuery JointChallenge JointNDCGShadow JwtResponsive KeyDial KinematicFailover KinematicPanFill KnobDecapsulate KnockbackDraggedVelocity KnockbackEnclave KnockbackTTLNextHop LODDSCP LSMApplyTorque LSMTimeoutRetry LagCENavmesh LambdaAcceleration LambdaDeployment LatencyPersistentEvaluate LatencyRank LatencySegmentTrace LeaseProvider LeaseScale LerpConstraint LiftHeartbeat LinearVelocity Liveness LivenessValidate LogitExchange LogitPaddingAnnounce LogitTTL LongPressChallengeDespawn MarginAttentionCircuit MarginDeploymentLease MaskEdgeAUC MaskTrainNDCG MeasurementProvider MemtableHop MeterGatewayLOD MetricHoverHaptic MetricNormalmapEpoch MigrateBackpropDeployment MinibatchStateful MipmapConsumer MirrorAnimate MirrorMinibatchFreeze MistHopEpoch MorphVortex MountRotate MoveTowardsCompactRotate MoveTowardsDecapsulateTile MoveTowardsRollingLOD MultiplexProvisionReorder MultiplexSealBandwidth NATBoxcastRecall NDCGCircuitLOD NamespaceSliderResponsive NavmeshAttestationStroke NavmeshOrchestration NextHopBurstDiscover NodeTokenOrchestration NonceDragGraph NonceMarginMipmap NonceSubscriberRoute NormalmapBreakerAdapter NormalmapPropagationQuery NsCompactionKinematic NsTile OperatorRotateGoodput OrchestrateAdaptive OrchestrateBleu OrchestratorTraceFeedForward OriginRoomPacketLoss OriginTransition OverlayPadding PKCEStrokeECT PacketLossManager PadAttention PadSpread PaddingCanaryBlur PaddingGraceful PaddingTick PaginationSoftmaxBackprop PanHandler PaneSpringRefresh ParticleConsensusHop ParticleVortex PartitionStatefulDeadline PasskeyForwardSpring PasskeyPrefetchTTL PatchHaptic PathEvict PathMirrorCold PepperCETile PerplexityAdjacency PersistentDetect PersistentDragSpacing PersonalizeECT PersonalizeValue PinchTransition Ping PodInterpolatePan PodOrchestration PongBlueGreen PoolBinding PoolNavmesh PoolPepper PortalTimeoutJoint PrecisionCircuitBreak PrecisionConsumer PrecisionHelper PredictionResponse ProbeStandardizeFeedForward ProjectBandwidth ProjectBatch ProjectCost ProjectGradient ProjectRotateTowardsBleu PropagationEnclaveResponsive PropagationSidecarDetect PublisherFunctionBleu QosQuote QuorumReconcileNDCG QuorumStrokeInit QuoteArchiveF QuoteScale ROCFlush ROCNDCGVacuum RadioFlushCancellation RadioJoint RadioOffsetCorrupt RadioSpherecastRotate RagdollCancellationTimeout RagdollCircuit RagdollDetect RagdollIntrospectEmbed RateLimitBurst RateLimitMigrateFeedForward RatingECTBreakpoint ReassembleCollider ReassembleDropoutCrossEntropy Rebalance Rebuild RebuildSpread RecallRotateTowards RecommendEmitter RecursorShutdownAdjacency RefreshBreakpointRestore RefreshMask RefreshMultiplex Regress RenderForwardPepper RenderValidate ReorderCrossEntropyAdapter ReorderManager Repair ReshardSpherecastJoint ReshardStateless ResolverAUC Respawn RespawnSafeArea ResponsiveBeam ResponsiveHydrate RestoreEdge ResumeHaptic RetryConsumer RetryExchangeDiff RetryRagdoll RigResumeTile RigidbodyOverlap Rolling RolloutBreakerStroke RolloutValidateLerp RotateAUC RotateCircuitSkip RotateEmbed RotateSpreadPinch RotateTowardsBeamPersistent RotateTowardsCircuit RotateTowardsVacuumDaemon RoughnessMatchSalt RoundTripBreakerPing RoundTripGoodputTokenize RoundTripRotate RttDraggedRotate SampleBinding SampleTrace ScanBinding Schedule ScheduleDeployment SchedulerDeadline SchedulerFragment SchedulerPurge ScoreSubscriberRouge ScrolledParticle ScrolledRetry Seal SealingEvict SealingHandler SealingHapticCompact SealingResidualUnseal SealingTeleport SealingThaw SequenceOriginLease ShadowResponsiveDeployment ShadowRougeDeadline ShardRoute SheetDrawerTap SidecarRadiusDSCP SidecarUnmount SmoothDampAcceleration SnackbarBackoffECN SnackbarNextHopAttestation SnapshotSoftmax SnapshotSpringCircuit SoftmaxDiff SoftmaxHandler SoftmaxMipmapRenegotiate SoftmaxTilePacketLoss SpacingHover SpacingPong SpacingValidateResidual SpanAdjacencyMask SpanEmbed Spawn SpecularRecall Spherecast SpherecastReassembleJitter SpinnerRecordTexture SpringOrchestration SpringViewport StackAnnounceDeployment StackMarginTurbulence StandardizeChunk StateBleu StateLiveness StateUpstreamRevoke StepQuote StreamerSetDrag StreamerTrace SubjectLinear SubscriberFeatureGradient SubscriberKinematicLongPress SubscriberSwipeBackprop SuspendCanary SwipeSpread SwitchBlurQuery SwitchFilter TabInterpolateSalt TeleportPepper TenantTurbulenceDrag TextureConstraint ThrottleGradient ThrottleRagdoll ThroughputAdapterAnnounce ThroughputUnmount ThroughputWrapper ThrustNextHop ThumbLongPressMirror ThumbWrap TileHandler TileHeuristicPerplexity TimeoutSnapshotCollider ToSDehydrate ToastDropped TokenAdaptive TokenBackSpan TokenBorderMask Tokenize TooltipPositionalBreakpoint TooltipShutdownValidate TopologySeal TorqueAttestationKinematic TorquePeerPropagation TraceDisabled Train TransformerSeal TunnelRebalanceTexture TurbulenceDaemonAnnounce UnmountGraph UpstreamForward UpstreamScoreCanary ValidateRaycast VectorNDCG VectorVacuumAttestation VelocityConsumer VelocityGoodputGap VolumeDecapsulate VolumeDiscover VolumeRougePropagation VortexActivationWrap VortexAdapterCanary VortexAnisotropy VortexFStateless VortexResponsiveZoomed VortexTruncate WarmStateless WaypointTap WeightAddVelocity WrapIntrospect ZoneShadow ZoneWaypointBackprop

Name

.text

Size

521KB

Virtual Size

520KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

272KB

Virtual Size

272KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

636B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

DenDen.exe

generic