Static task
static1
Behavioral task
behavioral1
Sample
brute12.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
brute12.exe
Resource
win10v2004-20230915-en
General
-
Target
brute12.exe
-
Size
51KB
-
MD5
2ad554f805ee5581af320427387727a3
-
SHA1
1aa3702ff715ce3e3bfac1a1bc799593079117c8
-
SHA256
d1bb9f200fa0d6d5df539a8be2904d7c4a8f9b13502b3927a4eb9b3187ecbc0d
-
SHA512
527850cd30e6d4de9674a65f880ec7d27229b0ed6b5fd676c4e044fb426829e05257e6d8cc618d09abcce5be459e5c42ddf82e69ca7e6e38a0577d9bd3df8517
-
SSDEEP
768:FJNUQQyas+YLkEQSYZMsiWNF60LS35323Taz06PiaROZYk/9wv05i84K9xTosqHB:FJ+bZjFh5hIUqcv/kt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource brute12.exe
Files
-
brute12.exe.exe windows:4 windows x86
01c677570ebcab04d9ae271e395a9b6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FileTimeToSystemTime
FindAtomA
FormatMessageA
GetAtomNameA
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
InterlockedIncrement
IsBadCodePtr
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TlsAlloc
TlsGetValue
TlsSetValue
WideCharToMultiByte
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
_snwprintf
abort
asctime
atexit
ceil
exit
fgets
floor
fopen
free
gmtime
localtime
malloc
memset
mktime
printf
signal
strlen
time
wcschr
wcscpy
wcslen
ole32
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CoGetObject
CoInitialize
CoUninitialize
oleaut32
GetActiveObject
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantChangeType
VariantClear
VariantInit
user32
MessageBoxW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 304B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE