Static task
static1
Behavioral task
behavioral1
Sample
TCP_Edited.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
TCP_Edited.exe
Resource
win10v2004-20230703-en
General
-
Target
TCP_Edited.exe
-
Size
411KB
-
MD5
8fe643b743796d1b15d76d6ee034f7bb
-
SHA1
5494c746bf0afcc3b48feb62b9905c820423cf78
-
SHA256
05311f3aa98758fb895bbbdfd3521f1d1ec9ac5867f680374e8acbf60fd943f5
-
SHA512
24fc3c1aee183434a8f7b99d216535770ddfac7dd94ca00f3d8c1907983ace417429bdf2f801b558c0014071b24cdb5d4f441fd570cd4b0a31c5aa814f561d31
-
SSDEEP
3072:w9JpWpQ27iSeJpdlm6DXeYKOPVpMl6gR:whWpQ23WnX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TCP_Edited.exe
Files
-
TCP_Edited.exe.exe windows x86
8c622f6d71aa3d07bd30e01a36f2f7fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrcatA
AllocConsole
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetVersion
GetLastError
GetModuleFileNameA
GetStdHandle
WriteFile
GetModuleHandleA
LCMapStringW
MultiByteToWideChar
GetStringTypeA
LCMapStringA
VirtualFree
HeapCreate
SetFilePointer
GetFileType
SetHandleCount
HeapDestroy
GetACP
GetCPInfo
GetOEMCP
FreeEnvironmentStringsW
FlushFileBuffers
CloseHandle
SetStdHandle
LoadLibraryA
GetProcAddress
VirtualAlloc
GetStringTypeW
GetStartupInfoA
GetCommandLineA
HeapFree
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
user32
GetFocus
SendDlgItemMessageA
EnableWindow
GetDlgItem
MessageBoxA
SetDlgItemTextA
GetDlgItemTextA
AppendMenuA
DialogBoxParamA
EndDialog
LoadIconA
GetSystemMenu
SetClassLongA
advapi32
RegCloseKey
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegCreateKeyExA
wsock32
WSACleanup
WSAStartup
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 951B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 367KB - Virtual size: 366KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ