challange_Benign_92cf07be4bd6836926960c92b963872e2af29224da4fce19e541a421c26c291c[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

challange_Benign_92cf07be4bd6836926960c92b963872e2af29224da4fce19e541a421c26c291c.exe
Size

64KB
MD5

5c8a4330c450ab61b5f9887b237c57aa
SHA1

3447f3f6c5a029bdd2afcd124345f374a4df4624
SHA256

92cf07be4bd6836926960c92b963872e2af29224da4fce19e541a421c26c291c
SHA512

1f48834bcb00aa73b3e6c43c57072b531b31e79514cc713cae5de9c245d1787aec7ca31606a1cb1bdfd8a117dc7a8e3ae45c5e519e58f5a05be7fe6f6033c99b
SSDEEP

1536:foh8tWwCL1mLQPz0APGk7tI6QFUJTes85Id6D:ghiWwCALQ703KLTes85I4D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
challange_Benign_92cf07be4bd6836926960c92b963872e2af29224da4fce19e541a421c26c291c.exe

Files

challange_Benign_92cf07be4bd6836926960c92b963872e2af29224da4fce19e541a421c26c291c.exe
.exe windows x64

69a9146badcb2881622c9bce400e0489

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineW
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryW
CreateFileA
EnterCriticalSection
LeaveCriticalSection
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
GetLastError
GetModuleHandleW
GetProcAddress
ExitProcess
RtlUnwindEx
RaiseException
RtlPcToFileHeader
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapReAlloc
LoadLibraryA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
CloseHandle
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

TranslateMessage
DispatchMessageW
GetMessageW

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69a9146badcb2881622c9bce400e0489

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 5KB - Virtual size: 13KB

.pdata Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 912B

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 5KB - Virtual size: 13KB

.pdata
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 912B