Static task
static1
Behavioral task
behavioral1
Sample
getpitch.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
getpitch.exe
Resource
win10v2004-20231023-en
General
-
Target
getpitch.exe
-
Size
216KB
-
MD5
4d4d5ba5c84d7e43b48d5bbe7865c6f4
-
SHA1
d1a8ac5e79b237d0fba9f533a0cdb4061640ea95
-
SHA256
c1116cd489736d6483c9be4791b55bb460999196149c58c1aca68b3238b35aae
-
SHA512
561c4fb3084560cf9945cb065d4823cc1695d3b9739c1fa80f6eb53c69af82fca3c52dad28f0aff2213c4a2a27a74b1554988f99de7f25189cffe69007622eb4
-
SSDEEP
1536:bELUzP4wMBuFAyHCgFqN5hrotj3gms72O5c77wtjETrcGogGG:KUzgwlimIJrotjwC8tjETrDopG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource getpitch.exe
Files
-
getpitch.exe.exe windows:4 windows x86
55a33a3395923717abfc581bd362d563
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetLastError
CloseHandle
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleA
RaiseException
ReadFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
VirtualAlloc
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
CreateFileA
SetUnhandledExceptionFilter
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetEndOfFile
LCMapStringA
LCMapStringW
Sections
.text Size: 184KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ