sleep[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sleep.exe
Size

36KB
MD5

2dbb1bd421b8dbb140dee4c0009b5b64
SHA1

bf67b97ffd75254f93e4bc88af12dd0d27aa54cb
SHA256

60503728f1269d3ca95c237e4b85750867e6627c6f0588dafdcdc353a01b4aee
SHA512

088ec7e4734d4ab76ff9a32da733a5793d890028565d287252bba9390ed9231cc4da45c9c0d3d2092a563bfe545c9d9e77e5b9a519f59f2aa6bfb97eb7df84a1
SSDEEP

384:bxKnYLPPbGprvCwXa81RR01VYtI5y0GiqPXFJo:bsYLrGhq0py+j/FJo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sleep.exe

Files

sleep.exe
.exe windows x86

9dfe784d0214beb5ad793429e3568571

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE