Step_One[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Step_One.exe
Size

3KB
MD5

8fddf3199bbcb17712889f81d6e5bd4b
SHA1

c05a3609fcdac47d7842b2438744b771815ae5fa
SHA256

17ccf2e6a34f5d7abe28f99c9ea6cec7088fb63469a88d396a2eb03de979e7e3
SHA512

ec7bee718e31d57959d0a6bf672e5a1c5b1425243c6df1a565d9a60e577f2c618620582c5eebffc55d27cc5fea220a7e5c7323dd10640e3bbe37d12100a72ada

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Step_One.exe

Files

Step_One.exe
.exe windows:4 windows x86

02ffe32b5948129830efb44dba855454

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
RegisterClassA
SendMessageA
LoadIconA
TranslateMessage
UpdateWindow
SendDlgItemMessageA
LoadCursorA
GetMessageA
DispatchMessageA
DefWindowProcA
ShowWindow
CreateWindowExA

gdi32

GetStockObject

kernel32

Beep
ExitProcess
GetModuleHandleA

Sections

.text
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE