challange_Benign_e152b71c5e6c9518916f086a2d11b5493eafa299a3b7b630d673acd50af16f7e[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

challange_Benign_e152b71c5e6c9518916f086a2d11b5493eafa299a3b7b630d673acd50af16f7e.exe
Size

59KB
MD5

a8222313742b57fcad9f9c10f38049aa
SHA1

6e152bb7398e6327427b4926853550c5c8439eb3
SHA256

e152b71c5e6c9518916f086a2d11b5493eafa299a3b7b630d673acd50af16f7e
SHA512

d3027d0f23f9291d66eed983275d35d6a187a64a613cd913cdd24ad8401540e105dc4733f5ba37f5702fbcce6a54eea56593b8fa8f07b90d7920a54937e7a11d
SSDEEP

768:aksU5FlCR+Ja8wwsNxf71rsC8kBWIWH6asHK30YlhIysg1C7b0H:pHq+Ja8wTd5rekB1k6lYlhItgKbg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
challange_Benign_e152b71c5e6c9518916f086a2d11b5493eafa299a3b7b630d673acd50af16f7e.exe

Files

challange_Benign_e152b71c5e6c9518916f086a2d11b5493eafa299a3b7b630d673acd50af16f7e.exe
.exe windows x64

49e06356e0fb67c4e4a85f69754c98bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
TraceMessage

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
lstrlenW
GetLongPathNameW
CompareStringW
WaitForSingleObject
CloseHandle
GetLastError
OpenProcess
HeapSetInformation

user32

GetDesktopWindow
PostMessageW
GetClientRect
CharNextW
EnableWindow
SetWindowPos
SetWindowLongPtrW

mfc42u

ord5702
ord4694
ord6812
ord5586
ord5724
ord5663
ord4752
ord1777
ord4365
ord6437
ord5406
ord5245
ord4721
ord5687
ord4368
ord5065
ord5730
ord5711
ord6053
ord3049
ord3243
ord3362
ord4017
ord3231
ord3366
ord3052
ord3166
ord3046
ord4082
ord4083
ord4077
ord3164
ord4371
ord4983
ord4770
ord3916
ord2752
ord2517
ord1498
ord1505
ord5229
ord4789
ord2670
ord2060
ord6814
ord3933
ord5484
ord1736
ord5683
ord2457
ord2140
ord5699
ord4988
ord4771
ord6887
ord1063
ord659
ord4598
ord1584
ord1463
ord2846
ord1404
ord2665
ord4473
ord1040
ord626
ord6328
ord4124
ord5077
ord4557
ord852
ord337
ord1812
ord6813
ord4836
ord2559
ord2515
ord6071
ord4191
ord1388
ord5615
ord2412
ord3468
ord4815
ord5722
ord2399

msvcrt

free
malloc
__wgetmainargs
__C_specific_handler
_XcptFilter
_exit
_cexit
exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
memset
__CxxFrameHandler3

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
EtwTraceMessage
RtlVirtualUnwind

shell32

SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHGetFolderLocation

shlwapi

PathAddBackslashW
PathCompactPathExW
StrRetToBufW
StrChrW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49e06356e0fb67c4e4a85f69754c98bf

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

mfc42u

msvcrt

ntdll

shell32

shlwapi

Sections

.text Size: 19KB - Virtual size: 18KB

.data Size: 1024B - Virtual size: 3KB

.pdata Size: 1024B - Virtual size: 732B

.rsrc Size: 27KB - Virtual size: 27KB

.reloc Size: 512B - Virtual size: 394B

.text
Size: 19KB - Virtual size: 18KB

.data
Size: 1024B - Virtual size: 3KB

.pdata
Size: 1024B - Virtual size: 732B

.rsrc
Size: 27KB - Virtual size: 27KB

.reloc
Size: 512B - Virtual size: 394B