__bt_init
tcc_backtrace
Resubmissions
02-09-2023 21:28
230902-1bnr6sfe3z 9Static task
static1
1 signatures
General
-
Target
main.exe
-
Size
1.0MB
-
MD5
c9de5e28e12be595d63f050fb728a935
-
SHA1
5aa013b96d733d7e7e77b02c57fa26461a1f2b2b
-
SHA256
6e6823d0d12fdf66cc74ec7241dfe71aa9000e34cfd5a7f62c95e733373cb2e2
-
SHA512
fef27ad9c84877a72c15c2922a231018f6591d75c92ef1bd22e8a0b48604cb11c801bb00490b7b2b4cc50710ce6f5e822ed1bf822e4376e0eb117780eedb4271
-
SSDEEP
12288:mZznKtuUlI9d0e+hU52B+dlIvphhXnXrX+8xrupWWSvI/s:POt+hU8B+dshhXnXrX+artlv5
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource main.exe
Files
-
main.exe.exe windows x64
3f40a7690d75d7380b3b21231c6b57d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
memmove
memset
memcpy
__iob_func
fprintf
exit
strerror
strlen
fflush
fwrite
_get_osfhandle
atexit
setbuf
memcmp
qsort
wcslen
_wgetenv
_putenv
_close
_write
_read
_wopen
_errno
_fdopen
_fseeki64
feof
_wfreopen
fread
ferror
fputs
getc
ftell
fclose
fseek
rewind
_chsize_s
_wstat64
_wrename
_wfopen
_fileno
_wpopen
_pclose
_wsystem
_waccess
_wremove
_wchdir
_wgetcwd
_chmod
_execvp
_execve
_getpid
signal
_utime64
_stat64
getenv
_strtoui64
atol
atoi
malloc
free
_setjmp
_beginthreadex
_endthreadex
_vsnprintf
vfprintf
strchr
strstr
longjmp
__argc
__wargv
_wenviron
_XcptFilter
__set_app_type
_controlfp
__wgetmainargs
kernel32
SetConsoleOutputCP
GetConsoleMode
GetConsoleOutputCP
GetStdHandle
SetConsoleMode
AddVectoredExceptionHandler
GetLastError
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryW
FreeLibrary
GetProcAddress
IsDebuggerPresent
GetEnvironmentStringsW
FreeEnvironmentStringsW
CopyFileW
RemoveDirectoryW
ReadConsoleW
ReadFile
GetModuleFileNameW
GetFileAttributesW
CreateFileW
GetFinalPathNameByHandleW
CloseHandle
GetFullPathNameW
FindFirstFileW
FindClose
FindNextFileW
CreateDirectoryW
CreatePipe
SetHandleInformation
ExpandEnvironmentStringsW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CreateSymbolicLinkW
CreateHardLinkW
GetComputerNameW
GetLongPathNameW
GetModuleHandleA
TerminateProcess
GenerateConsoleCtrlEvent
Sleep
PeekNamedPipe
EnterCriticalSection
LeaveCriticalSection
DebugBreak
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
GetEnvironmentVariableA
GetModuleFileNameA
CreateFileA
SetFilePointer
WriteFile
GetSystemInfo
VirtualQuery
VirtualAlloc
VirtualFree
GlobalAlloc
GlobalFree
GetCurrentProcess
GetCurrentThread
DuplicateHandle
GetCurrentThreadId
GetExitCodeThread
SuspendThread
GetThreadContext
ResumeThread
SetLastError
CreateThread
ExitThread
SetUnhandledExceptionFilter
advapi32
GetUserNameW
user32
MessageBoxA
Exports
Exports
Sections
.text Size: 598KB - Virtual size: 598KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stab Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stabstr Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ