Step_One[.]exe | Triage

Sharing

General

Target

Step_One.exe
Size

8KB
MD5

e266e19d05ab230a06ec77c9a30cd2b1
SHA1

dc07d629650b6d955bc979b10d9ff9f9260ee40e
SHA256

2423988a9ce310b506c0c6730654a0ff522bee97faf192372e3a17f898fdac05
SHA512

0aae150ecf457961ef1500c489870e1435cf0c5127216ea2b7ee3a18192b43b602284cfbd2fbee4b21aa120e62b41de576937c6d91d804662650d8d52f42df81
SSDEEP

48:6wozA2uf92Iw75YbbvFrSB2rVzdmDzrm1sFhATnV5cdsSMENssQ888b888gssuU2:Ww9mNqrS4hzdomyMZ1d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Step_One.exe

Files

Step_One.exe
.exe windows:4 windows x86

8f124e8801cc4b830bbd593cacb9ce1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
EndPaint
GetClassLongA
GetMessageA
GetWindowDC
DrawCaption
LoadIconA
PostMessageA
PostQuitMessage
RegisterClassExA
SetRect
ShowWindow
TranslateMessage
UpdateWindow
DispatchMessageA
DefWindowProcA
CreateWindowExA
LoadCursorA
BeginPaint

gdi32

CreateSolidBrush

kernel32

ExitProcess
GetModuleHandleA

Sections

.text
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 347B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ