Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230712-en
General
-
Target
file.exe
-
Size
410KB
-
MD5
82333e8388884ed07a8104b1da402b34
-
SHA1
b45d4e410abff1ab9fcdd31a3d7778d9f9ad3b18
-
SHA256
6dda6c6e5f927c449bb2e3748eaa9329aab3c6c3f9f54bbdaf8f49d33f844a56
-
SHA512
6443c438d2189d49b1affc748325851cfae37335b8b5975ae89c840149a649beafbaeb0dd3476e91ee769b4bf1c896cc1192bce4eb2d9ecced21466affb1c1e3
-
SSDEEP
3072:GeL7M9/t9Gfz045atvpUYWvyjk7CBOJbQS6w1/h5C/ahaORqmkrhOzM5b9ImJThd:PM9rGfg1tBKSO9uMP83dhOMbSUsvCfP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource file.exe
Files
-
file.exe.exe windows x86
a5494563fbba88cb05fb13a72779b2e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
SetInformationJobObject
AllocConsole
MoveFileExW
InterlockedDecrement
WaitNamedPipeA
GetCurrentProcess
GetNamedPipeHandleStateA
HeapFree
GetProfileStringW
SetComputerNameW
GetComputerNameW
GetTimeFormatA
FlushConsoleInputBuffer
FreeEnvironmentStringsA
_lclose
_lcreat
GetModuleHandleW
GetConsoleAliasesLengthA
GetWindowsDirectoryA
GetCompressedFileSizeW
GetConsoleAliasExesW
EnumTimeFormatsA
GetDriveTypeA
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
TerminateThread
FatalAppExitW
_hread
GetPrivateProfileStructW
GetCalendarInfoW
GetConsoleAliasExesLengthW
DeleteVolumeMountPointW
GetFileAttributesA
TransactNamedPipe
GetFileSize
GetStartupInfoW
VirtualUnlock
GetLastError
IsDBCSLeadByteEx
SetLastError
BackupRead
ReadConsoleOutputCharacterA
GetProcAddress
CreateNamedPipeA
MoveFileW
GlobalGetAtomNameA
OpenWaitableTimerA
InterlockedExchangeAdd
LocalAlloc
BuildCommDCBAndTimeoutsW
GetNumberFormatW
GetCurrentConsoleFont
EnumDateFormatsA
CreateIoCompletionPort
GetModuleHandleA
UpdateResourceW
FreeEnvironmentStringsW
FindNextFileW
CreateMailslotA
GetCurrentDirectoryA
OpenSemaphoreW
SetFileShortNameA
ReadConsoleInputW
LocalSize
FindFirstVolumeW
DeleteFileW
DeleteFileA
CloseHandle
CreateFileW
ReadFile
GetConsoleAliasW
GetCommandLineW
WriteConsoleW
LCMapStringW
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
MoveFileA
HeapAlloc
HeapReAlloc
GetCommandLineA
HeapSetInformation
RtlUnwind
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
ExitProcess
WriteFile
GetModuleFileNameW
HeapCreate
SetFilePointer
HeapSize
RaiseException
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
MultiByteToWideChar
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
user32
CharUpperBuffA
CharUpperA
advapi32
RevertToSelf
winhttp
WinHttpGetProxyForUrl
Sections
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 30.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ