Static task
static1
Behavioral task
behavioral1
Sample
Prep1_Main.exe
Resource
win10-20230220-en
General
-
Target
Prep1_Main.exe
-
Size
9KB
-
MD5
3772f7c9c088786699ee188b1552f4c9
-
SHA1
4e47beca724851366bbc7aefc822cfbf9549e430
-
SHA256
3364e178282ce090083862c10c3e48903cad7d14bfacf2bd93e87b7519ac1a27
-
SHA512
59d47e9779620f265fbe205dc398295feb27a28805eec722d22dd36d84af5bc3a9b7a6157ea6bfcb07bd3f05e05c80de61b61d77a295bca9686a08aef02fed0f
-
SSDEEP
96:yZWW/wsTk5+iseEz2e7B5cMAqItdw+3lAnlzkSE5pz659gAx8qb9:yZQsTk5+xt6e96zT1An97E5pz659qu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Prep1_Main.exe
Files
-
Prep1_Main.exe.exe windows x86
e4e59aebe60703ce9bf61c3bc375d048
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
vcruntime140
memset
_except_handler4_common
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__acrt_iob_func
__p__commode
_set_fmode
api-ms-win-crt-runtime-l1-1-0
_c_exit
_seh_filter_exe
_cexit
_crt_atexit
_controlfp_s
terminate
_set_app_type
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
__p___argv
_register_onexit_function
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__p___argc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
kernel32
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ