Step_One[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Step_One.exe
Size

84KB
MD5

4a504c05f05a10efbd04f9eb958ac00f
SHA1

325fa6fea19ca4dd791add7057da27395eef7e4b
SHA256

68d74df954f5516252570bcdb369aab0a442096a0fb2c41dda95ab4f7b770e53
SHA512

78016b1639db53a4fa3640065ac64b62bcbefbf5617731c22c4f59bb71ca24998ab892963dc7e08bb757efdb34cd0eab74b0ebb9103c1a5113fefb877123c57e
SSDEEP

1536:9t7aWybQ1F4gohcAmJ0m6tlzUDonzK1pbrAQt8Pe2ev9x4aQ:H7aWyW4jhlmmlzUSK1pv38PHeVxQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Step_One.exe

Files

Step_One.exe
.exe windows:4 windows x86

4bdfa77451d830f3b268ea81d6fe0821

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
LoadMenuA
LoadStringA
PostQuitMessage
LoadCursorA
ShowWindow
TrackPopupMenu
TranslateMessage
UpdateWindow
GetSubMenu
GetMessageA
GetDC
GetCursorPos
DispatchMessageA
DefWindowProcA
RegisterClassA
CreateWindowExA

gdi32

SetBkMode
TextOutA
SetTextColor
GetStockObject

kernel32

ExitProcess
GetModuleHandleA

Sections

.text
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ