Static task
static1
Behavioral task
behavioral1
Sample
challange_Benign_a03070437734ff17b28911a70369011679f45584b537cff0a63690eb4b66cb19.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
challange_Benign_a03070437734ff17b28911a70369011679f45584b537cff0a63690eb4b66cb19.exe
Resource
win10v2004-20230703-en
General
-
Target
challange_Benign_a03070437734ff17b28911a70369011679f45584b537cff0a63690eb4b66cb19.exe
-
Size
45KB
-
MD5
41fcf7353ac29c4bda32c780295cb21b
-
SHA1
cc8f9bc9c26f2cf025e37fb80273057bece14722
-
SHA256
a03070437734ff17b28911a70369011679f45584b537cff0a63690eb4b66cb19
-
SHA512
aafed5fa04e22b2875ed8e4f30d04a91aeab09d3b3081c419ef6dc17cbcd08a50a84305b14cfdeecc8fdb117437bd6eea6ba961534c1e694331ee0e1e6a6e720
-
SSDEEP
768:Q3WB5tprmyKIJ/xNxZFkc/rJ/MYoeAgQ50MzNw:8WvjrmyKIJ/xNx/XoeAgEw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource challange_Benign_a03070437734ff17b28911a70369011679f45584b537cff0a63690eb4b66cb19.exe
Files
-
challange_Benign_a03070437734ff17b28911a70369011679f45584b537cff0a63690eb4b66cb19.exe.exe windows x86
7f74fff57d449a838aeb26e33886f227
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
ExpandEnvironmentStringsA
FindNextFileA
FindClose
FindFirstFileA
GetFileAttributesA
GetFileAttributesExA
CreateDirectoryA
GetVersion
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
HeapSize
ExitProcess
GetStartupInfoA
GetCommandLineA
DeleteFileA
GetModuleFileNameA
CopyFileA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
WriteFile
CloseHandle
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleHandleA
Sleep
GetTickCount
user32
GetCursorPos
GetAsyncKeyState
GetDoubleClickTime
keybd_event
MapVirtualKeyA
mouse_event
GetSystemMetrics
GetKeyState
LoadImageA
SetWindowPos
DestroyMenu
TrackPopupMenu
AppendMenuA
CreatePopupMenu
VkKeyScanA
SetKeyboardState
MessageBoxIndirectA
SetFocus
InvalidateRect
UpdateWindow
ShowWindow
SetWindowLongA
SendMessageA
CreateWindowExA
FindWindowExA
GetCursor
CreateCursor
PostQuitMessage
KillTimer
DestroyCursor
GetWindowRect
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
RegisterClassExA
LoadIconA
GetDC
SetRect
GetForegroundWindow
SetTimer
CallWindowProcA
SetCursor
DefWindowProcA
GetWindowLongA
PostMessageA
BeginPaint
GetClientRect
GetWindowTextA
IsWindow
DrawTextA
EndPaint
wsprintfA
MessageBoxA
SetWindowTextA
SetCursorPos
gdi32
DeleteObject
SelectObject
GetStockObject
SetTextColor
SetBkMode
DeleteDC
BitBlt
SetBkColor
GetPixel
CreateBitmap
CreateCompatibleDC
RectVisible
CreateFontIndirectA
GetObjectA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ