Static task
static1
Behavioral task
behavioral1
Sample
pjbtest.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
pjbtest.exe
Resource
win10v2004-20231023-en
General
-
Target
pjbtest.exe
-
Size
96KB
-
MD5
301424213dedf9c8a21d204823897eb0
-
SHA1
3decbd831a354849a78d829514f5d020647f2667
-
SHA256
d110a9f8fb3fd53cb9fc7841a1d5b58cb7be4736d1a886f2bc262b2f576abd2f
-
SHA512
fd383593cefadf5cb0725865704c567f1a74a667ee3dab914d519a889b88ea373adcfb4eb3069536b65681f72b3b8ed8712e1939da73cfdcc8f212454fcd88af
-
SSDEEP
1536:69Xh2iaNMn1dV4IRGqFdmvFTqLUJC9OJTdAsobR:6iiamn1drR7z6FVMOJhAsoV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource pjbtest.exe
Files
-
pjbtest.exe.exe windows:4 windows x86
e2d0fc44d3aa88e55adb13ddfc3d986c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
GetTickCount
CreateEventA
CloseHandle
CreateFileA
OutputDebugStringA
DeviceIoControl
WriteFile
GetOverlappedResult
WaitForSingleObject
GetLastError
ReadFile
ResetEvent
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetCommandLineA
GetVersion
HeapFree
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
Sleep
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetFilePointer
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE