Static task
static1
Behavioral task
behavioral1
Sample
data.exe
Resource
win10v2004-20231025-en
General
-
Target
data.bin
-
Size
555KB
-
MD5
9ac6a6e541af112a8a28d7bce2e1aaa7
-
SHA1
c4182a828f74dbfc6440b68250906d4f8067c699
-
SHA256
df0d9c0df01964674189ca9362c2064b73f4151b43fe4efb57e4fdf75285a2ff
-
SHA512
617d56444315a68fb54eb9a1efe506d603e7ee60b8d2b0ca16266df33428df265100900475a5781223d52cefbf502f9832beda807d19a3863e0b960b62d5dfe9
-
SSDEEP
6144:WjxL7ARz3qYSb6fpQ3kN7+jPBc5CqKSBF3FF+t0Q0FGHlL6zVwByivv6+uVrDqL4:Wj++1S7+jPfqK8F3fsZXBvG6BGHV/Hx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource data.bin
Files
-
data.bin.exe windows:4 windows x86
146d733fc6865bded0562df01afedbdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
Imports
kernel32
AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileW
DeleteFileA
DeleteFileW
ExitProcess
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetProcAddress
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SetUnhandledExceptionFilter
Sleep
UnlockFile
UnlockFileEx
UnmapViewOfFile
WideCharToMultiByte
WriteFile
msvcrt
__getmainargs
__p__environ
__set_app_type
_access
_cexit
_fileno
_fmode
_fpreset
_iob
_isatty
_setmode
atexit
atoi
exit
fclose
fflush
fgets
fopen
fprintf
fputc
free
getenv
isalnum
isalpha
isdigit
isprint
isspace
localtime
malloc
memcpy
memmove
memset
printf
putc
qsort
realloc
signal
strcmp
strncmp
strncpy
tolower
Sections
.text Size: 445KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 912B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 5KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.stabstr Size: 5KB - Virtual size: 5KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ