Step_One_2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Step_One_2.exe
Size

2KB
MD5

51e6bcd9ac30d4c2ef4ad720ba888280
SHA1

7b2b8159e07d2506d942edb548bdf1e834132546
SHA256

91844d15cd29e2bacbada75fab83429103d36bd7c690c6b1dde6bff27c8bf97e
SHA512

9725f029fef2168644f363a4e0ca78a591c981ebbac8dcfed36a1d83dd2940f503b5a06d1d5d02c68fd3bf75f3faf6dde01759fc21bd3e4f32039f60ef0192e3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Step_One_2.exe

Files

Step_One_2.exe
.exe windows:4 windows x86

4e11dedda74fdca2df7d4eb456dd49a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
PostQuitMessage
RegisterClassA
LoadCursorA
TranslateMessage
UpdateWindow
GetMessageA
DispatchMessageA
DefWindowProcA
ShowWindow
CreateWindowExA

gdi32

GetStockObject

kernel32

ExitProcess
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE