challange_Benign_ce24ed9e6cb46f487aab9e7fc0165f6cd8c4a74a566de0b33e5847d1ca82e673[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

challange_Benign_ce24ed9e6cb46f487aab9e7fc0165f6cd8c4a74a566de0b33e5847d1ca82e673.exe
Size

19KB
MD5

3433b736b0924e00ecd28b9ba39680ef
SHA1

3c0caa9ebda0ed260dc4aaa78558018e53d461dc
SHA256

ce24ed9e6cb46f487aab9e7fc0165f6cd8c4a74a566de0b33e5847d1ca82e673
SHA512

eca84dfa1e99fa40eea74363314349cbd0edec612d585ae4f8d6b46db70b8abf33390f3bbc8109a6bf69c0c0beca4bac6f15407d09a5b44d957c55f208f53466
SSDEEP

384:wmt8lZyb2y9CEg5KKDQxLlVlqdeU3g/c:xmlcSyWDQxZ/Ke0Sc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
challange_Benign_ce24ed9e6cb46f487aab9e7fc0165f6cd8c4a74a566de0b33e5847d1ca82e673.exe

Files

challange_Benign_ce24ed9e6cb46f487aab9e7fc0165f6cd8c4a74a566de0b33e5847d1ca82e673.exe
.exe windows x86

29c28daad74f396a84176d4c98cc6450

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoCreateInstance

user32

PeekMessageW
SendMessageW
DestroyWindow
ShowWindow
CreateDialogParamW
GetDlgItem
DispatchMessageW
EnableWindow
SetWindowTextW
MessageBoxW
LoadIconW
IsDialogMessageW
SetDlgItemTextW
GetMessageW
TranslateMessage

advapi32

RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW

shell32

SHGetFolderPathW

msvcrt

_amsg_exit
__getmainargs
_cexit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_controlfp
_exit
wcsncpy
wcslen
wcscpy
wcscat
memset
?terminate@@YAXXZ

kernel32

InterlockedExchange
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
IsProcessorFeaturePresent
GetModuleHandleA
GetSystemTimeAsFileTime
MoveFileExW
CopyFileW
FormatMessageW
LocalFree
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetTickCount
CreateProcessW
GetCurrentThreadId
GetCurrentProcessId
GetLastError
CloseHandle
GetTempPathW
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesW
DeleteFileW
CreateDirectoryW
GetCommandLineW
GetStartupInfoA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29c28daad74f396a84176d4c98cc6450

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

advapi32

shell32

msvcrt

kernel32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 7KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 7KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 4KB - Virtual size: 3KB