Static task
static1
Behavioral task
behavioral1
Sample
Start.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Start.exe
Resource
win10v2004-20231215-en
General
-
Target
Start.exe
-
Size
124KB
-
MD5
77b6804e938c9a12e7b39886cae2ff4c
-
SHA1
38c988be60eeacf06b2d218b21a9c994c229c64b
-
SHA256
5251f9c8c8f45ebd87cb90f364d4eaea491fe03411ddccc82a4fd9e4993905fc
-
SHA512
590086c5fb2037e3dd6dbd1142fd91bf60bafb155754aa36efc472cacbfc6491b3d604edfc425fcb97633425e7af12617a8f257dbf296a9a592bacec711e2ec8
-
SSDEEP
1536:bDrbW2FJtxoM9TK1/T85/RbEqzvVDCwtUwiTq4RFL2ymjFzi8jFG7eJkjtx5M0:vDFzxugtRb3h7AFL2yFkkjtx5M0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Start.exe
Files
-
Start.exe.exe windows:4 windows x86 arch:x86
56661c677a8d8f611ca87375f3fe523c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
FreeLibrary
GetLastError
LoadLibraryW
GetModuleFileNameW
SetCurrentDirectoryW
CloseHandle
FlushFileBuffers
CreateFileA
WriteConsoleW
GetFileAttributesW
FormatMessageW
LocalFree
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
shell32
SHGetSpecialFolderPathW
ShellExecuteExW
ole32
CoInitialize
CoUninitialize
comctl32
InitCommonControlsEx
user32
MessageBoxW
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ