Static task
static1
Behavioral task
behavioral1
Sample
Lab13-01.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Lab13-01.exe
Resource
win10v2004-20230703-en
General
-
Target
Lab13-01.exe
-
Size
32KB
-
MD5
a9a2734d080e3ae0f5ada35e878da7c8
-
SHA1
e8aacb0990e9f3a415ac7d5e24e7f7287665c110
-
SHA256
71a295247ba7419f9f9dea8098e6867182bb80f53c98eb0f59192a6557a51249
-
SHA512
1c4f211356e6ddcf80f4687fc39f95fa8fc0403162caaf8ee17837d6e847a23043c8f74c1e5652ed83c4e3e1710185dde6a8786a743933850f085f52ca85cb0f
-
SSDEEP
384:y9LmTOjSMsXu0Pip5Na32mlRfTlyKU0qgruE1oVj:yJkOjKxoNa5DqGu6oV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Lab13-01.exe
Files
-
Lab13-01.exe.exe windows x86
4c9c8ddd8e46e16d366b0eb88a72ae24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadResource
GlobalAlloc
SizeofResource
FindResourceA
GetModuleHandleA
Sleep
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
CloseHandle
ws2_32
WSACleanup
gethostname
WSAStartup
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ