Step_One[.]exe | Triage

Sharing

General

Target

Step_One.exe
Size

74KB
MD5

2862e1de3e5744f3b92e5312c37e6b2f
SHA1

f55f22b29c2ec4d1f7c0a30872124b30d634d5db
SHA256

9dfa2e9a8db8264726cacd568e75323196bc15f7f048f9e2e27e961f74b12d44
SHA512

6236caf4f4340a8e99820a699107fc8736a562a42b902cb9b847672a59cb68330ef7c314720e8cecd3e474a3995fa9c72680863a85dfbb3159a265c83930924d
SSDEEP

1536:o/EOWtrqrLBCWDXyodZfbgHpCKv4vI0qdaMVqyKHQVpUesFvyulEpa:o/EOQO4w4L4vyIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Step_One.exe

Files

Step_One.exe
.exe windows:4 windows x86

dc200107a9b8e93051b088e4d8aaa1d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
LoadIconA
InvalidateRect
LoadImageA
SendDlgItemMessageA
SetClassLongA
LoadCursorA
GetMessageA
DispatchMessageA
DefWindowProcA
UpdateWindow
CreateWindowExA

gdi32

DeleteObject
CreateSolidBrush

kernel32

ExitProcess
GetModuleHandleA

Sections

.text
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ