challange_Benign_2c8a36f5437e1648cc2fd20464ebbaddaf3702246a32261a34231055afad1c46[.]exe | Triage

Sharing

General

Target

challange_Benign_2c8a36f5437e1648cc2fd20464ebbaddaf3702246a32261a34231055afad1c46.exe
Size

20KB
MD5

dcf974c8ae95f2867aab4f3f59afdc76
SHA1

9297b0080ce921e73e4d61e938f83a9303ea3b68
SHA256

2c8a36f5437e1648cc2fd20464ebbaddaf3702246a32261a34231055afad1c46
SHA512

982568ffed46e80c6ccb35b781bc4cce0d0508311f10b0d6c77ed2aabd2f6d29b0a459d473e0b578e5376ce539881a3d5df102bf83827b1b963a33cecefc1673
SSDEEP

96:Zzo/pTZnyO2WHGD+PWtsANRZAbWla2gb1adbGDJ/+a3IxNGG8hlnLt4CoDEP6Oc:ATZnyuHOIWSYAbWla2gbVR+a3IeYRO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
challange_Benign_2c8a36f5437e1648cc2fd20464ebbaddaf3702246a32261a34231055afad1c46.exe

Files

challange_Benign_2c8a36f5437e1648cc2fd20464ebbaddaf3702246a32261a34231055afad1c46.exe
.exe windows x86

efb94ab193d04fab7d129aae94246087

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
WriteFile
GetStdHandle
lstrcpyA
lstrlenA
GetModuleHandleA
GetLastError
FormatMessageA
SetConsoleTitleA
GetExitCodeProcess
WaitForSingleObject
GetCurrentThreadId
ExitProcess
LocalAlloc
GetCommandLineA

user32

GetWindowThreadProcessId
FindWindowA
CharUpperA
LoadStringA
CharToOemA

shell32

ShellExecuteExA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

consvns
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE