Static task
static1
Behavioral task
behavioral1
Sample
malwan_assignment.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
malwan_assignment.exe
Resource
win10v2004-20220812-en
General
-
Target
malwan_assignment (2).zip
-
Size
1.6MB
-
MD5
b67af33adaccdc663cd44415246c492b
-
SHA1
934a6f8cb23926d07ca2aa4a3d39e5380ba6d5d7
-
SHA256
e351581b7726cb6854cccf7dd1af794fd5540193a9f870e26d4d93f5f6af5b75
-
SHA512
479459acffca8bf55e751baaab345fa0460ca026fc6eef79f2f5f681fdcab16635b6a3874f951a8abd7cdb77bd870495929ff18070d41373b6e9329e28672b54
-
SSDEEP
24576:dl8Ob015GU/cA8e0e1KR9GpkiBlf/MIlUpHMr0NCmlFjmbXKy2IgaWmY:dl8Ob01j/cAF0LqkivlUpHszXH25mY
Malware Config
Signatures
Files
-
malwan_assignment (2).zip.zip
Password: malware
-
malwan_assignment.exe windows x86
010c627d63999ae88e74fc3ba73294be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsWow64Process
GetCurrentProcess
GetVersionExA
DeviceIoControl
lstrcpyn
CreateFileA
OutputDebugStringA
IsDebuggerPresent
GetEnvironmentStrings
CreateWaitableTimerA
GetTempPathA
ExitProcess
WideCharToMultiByte
WaitForSingleObject
CreateMutexA
GetACP
HeapSize
RaiseException
TerminateProcess
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
GetModuleFileNameA
CreateThread
DeleteFileA
GetProcessHeap
HeapAlloc
LCMapStringA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
GetFileSize
ReadFile
SetFilePointer
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetUserDefaultLCID
WriteFile
CreateDirectoryA
GetStartupInfoA
CreateProcessA
IsBadReadPtr
HeapReAlloc
GetModuleHandleA
VirtualFreeEx
VirtualAllocEx
ReadProcessMemory
WriteProcessMemory
FindClose
FindNextFileA
FindFirstFileA
FindCloseChangeNotification
FindNextChangeNotification
FindFirstChangeNotificationA
TerminateThread
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
RtlMoveMemory
VirtualAlloc
SetWaitableTimer
HeapFree
RtlUnwind
GetCommandLineA
ReleaseMutex
MultiByteToWideChar
GetOEMCP
GetCPInfo
FlushFileBuffers
SetErrorMode
GetProcessVersion
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
SetLastError
InterlockedIncrement
lstrcpyA
lstrcatA
WritePrivateProfileStringA
InterlockedDecrement
GlobalFlags
MulDiv
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
lstrlenA
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
CloseHandle
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleRun
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
CoRegisterMessageFilter
user32
PeekMessageA
wsprintfA
MessageBoxA
SendMessageA
FindWindowExA
FindWindowA
MoveWindow
CreateDialogIndirectParamA
GetWindowLongA
GetWindow
GetDesktopWindow
SetWindowPos
GetWindowThreadProcessId
DispatchMessageA
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage
UpdateWindow
ShowWindow
CreateWindowExA
EndDialog
MsgWaitForMultipleObjects
DestroyMenu
PostThreadMessageA
UnregisterClassA
LoadStringA
GetSysColorBrush
GetWindowRect
LoadCursorA
LoadIconA
MapWindowPoints
GetSysColor
SetActiveWindow
IsWindow
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
GetCapture
PostMessageA
SetCursor
EnableWindow
IsWindowEnabled
RegisterClassA
GetParent
SetWindowsHookExA
GetCursorPos
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
GetClassNameA
PtInRect
GetDlgCtrlID
ClientToScreen
SetWindowTextA
GetWindowTextA
UnhookWindowsHookEx
GetMenuItemCount
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
GetDlgItem
SendDlgItemMessageA
IsDialogMessageA
SetWindowLongA
SetFocus
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenu
GetClassInfoA
WinHelpA
GetLastActivePopup
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
RegCreateKeyExA
shlwapi
PathRemoveExtensionA
PathIsURLA
PathFileExistsA
PathFindFileNameA
psapi
EmptyWorkingSet
gdi32
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
CreateBitmap
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
comctl32
ord17
oledlg
ord8
oleaut32
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
Sections
.text Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ