Static task
static1
Behavioral task
behavioral1
Sample
step.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
step.exe
Resource
win10v2004-20230220-en
General
-
Target
step.exe
-
Size
17KB
-
MD5
46f26de907de6172a2f0635699447ee8
-
SHA1
7b04bc5ecd600998f5897f3d966406e3a39ff1ca
-
SHA256
eaf617be85a6cf5fdb338fa825a7e3c5136b5d8009eec30457d7aebc43335906
-
SHA512
32b5c38cb7229c7bb9e724c7aad8050d0e976a56d4fe2b06b4cc2fdb7e9d174d7bd59420a870de97fb4778e6fdda35b54b6dc9601c0c24751b16bf6f2a7e8d05
-
SSDEEP
192:4ngQgd7MwHxnrEDZtVGFQ6mMPPKetjMoe1F4QSNC+nZnMyJVzFAt082L:4nDs7M6gDtb6XqL4jppJVeC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource step.exe
Files
-
step.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ