Static task
static1
Behavioral task
behavioral1
Sample
Exercice6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Exercice6.exe
Resource
win10v2004-20230220-en
General
-
Target
Exercice6.exe
-
Size
24KB
-
MD5
c04fd8d9198095192e7d55345966da2e
-
SHA1
86ee262230cbf6f099b6086089da9eb9075b4521
-
SHA256
0c98769e42b364711c478226ef199bfbba90db80175eb1b8cd565aa694c09852
-
SHA512
2b16a4aa0a58acc8139b5ecc80249e29d57daa07cc0995612f348caddb990e92e3cd26750e431251c7d9242e3c1dddaf6d275aee87ff1b23a1a03580ea8040a8
-
SSDEEP
192:9ZbemA7014/2fpSTsrQX7bOxTJuXV2wBrMqVbmZBdZDh8LO917ky/wN1DV7yy8D+:PF/ia9tMmlD8M1Oyy8DT6+8Fmo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Exercice6.exe
Files
-
Exercice6.exe.exe windows x86
8da16e39c9a232fcb6894ec30bf5bdbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateWaitableTimerA
SystemTimeToFileTime
GetModuleFileNameA
SetWaitableTimer
CreateMutexA
ExitProcess
OpenMutexA
WaitForSingleObject
CreateThread
GetCurrentProcess
Sleep
GetStringTypeA
LCMapStringW
LCMapStringA
GetCommandLineA
GetVersion
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW
advapi32
CreateServiceA
StartServiceCtrlDispatcherA
OpenSCManagerA
wininet
InternetOpenUrlA
InternetOpenA
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE