Static task
static1
Behavioral task
behavioral1
Sample
challange_Benign_8cc59282d6e3d76f424ee93c01b43bc4cd8342db6159d0e5f5010b9874eb8e75.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
challange_Benign_8cc59282d6e3d76f424ee93c01b43bc4cd8342db6159d0e5f5010b9874eb8e75.exe
Resource
win10v2004-20230703-en
General
-
Target
challange_Benign_8cc59282d6e3d76f424ee93c01b43bc4cd8342db6159d0e5f5010b9874eb8e75.exe
-
Size
44KB
-
MD5
65244fecde0588373effe1a13a9133f7
-
SHA1
b3d13561176ebe77d64e4488776469ccb0ebb85b
-
SHA256
8cc59282d6e3d76f424ee93c01b43bc4cd8342db6159d0e5f5010b9874eb8e75
-
SHA512
ee1eadc37f39bc71aebe59ff047fa45654e13541716fce0fe81c75e87b7cc6bf286e8bc745d84bc65bf22dd83448d53e1375b2c0bffdbce3f8d2f0615699891f
-
SSDEEP
384:q4GzirVKRwxItQOPiJVNWM3HBZyq+d2jDm7HE6jR94pA7ohC8F:q3IwCzWM3HXm7HEYR94e7f8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource challange_Benign_8cc59282d6e3d76f424ee93c01b43bc4cd8342db6159d0e5f5010b9874eb8e75.exe
Files
-
challange_Benign_8cc59282d6e3d76f424ee93c01b43bc4cd8342db6159d0e5f5010b9874eb8e75.exe.exe windows x86
725e53ef119754947f58865de955200a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
CloseHandle
GetSystemTimeAsFileTime
TerminateProcess
InitializeSListHead
GetCurrentProcess
EnterCriticalSection
msvcp140
_Query_perf_counter
_Xtime_get_ticks
_Query_perf_frequency
?_Xlength_error@std@@YAXPBD@Z
_Thrd_sleep
vcruntime140
_CxxThrowException
__std_exception_copy
__std_exception_destroy
__current_exception_context
memset
_except_handler4_common
memmove
memcpy
__current_exception
api-ms-win-crt-stdio-l1-1-0
__p__commode
__acrt_iob_func
_set_fmode
__stdio_common_vfprintf
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-filesystem-l1-1-0
rename
api-ms-win-crt-runtime-l1-1-0
_errno
strerror
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_controlfp_s
terminate
_seh_filter_exe
_crt_atexit
_c_exit
_cexit
__p___argv
__p___argc
_set_app_type
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_register_thread_local_exe_atexit_callback
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ