Static task
static1
Behavioral task
behavioral1
Sample
job.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
job.exe
Resource
win10v2004-20240226-en
General
-
Target
job.exe
-
Size
398KB
-
MD5
744b858fa9af1d5e743925e6350ad1b2
-
SHA1
2c260a0b54e42cf666ac2d11356d4200fadcf6b6
-
SHA256
beb09ce57280161ec91d23c6c4b90bee6644a7a556f7188a64241a035c9d5e2c
-
SHA512
b0f8a368d80a4655f2c8d80e282f6ad32febf084b778af541bf95e22f51f12cc4bf2471d4aabf729aa68f30d87c923961c5990c430779bde496a221bed463d31
-
SSDEEP
12288:if+Fj3xo5K+yZxOQpt9D+OT4rUfS1dTBPp8:iobxqK+QbtDVoUMlPp8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource job.exe
Files
-
job.exe.exe windows:6 windows x86 arch:x86
d9b272f1adb1e769e3a828736ec03c1e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
lstrcpyA
MultiByteToWideChar
FindClose
FindFirstFileA
GetFullPathNameA
CloseHandle
GetLastError
SetEvent
WaitForSingleObject
CreateMutexA
OpenEventA
GetSystemDirectoryA
GetModuleFileNameA
lstrcatA
lstrlenA
GetPrivateProfileIntA
GetTempFileNameA
Sleep
GetExitCodeProcess
CreateProcessA
CopyFileA
CreateFileA
DeleteFileA
GetTempPathA
CreateEventA
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
OpenProcess
FreeLibrary
GetProcAddress
LoadResource
LockResource
SizeofResource
FindResourceA
IsBadWritePtr
IsBadStringPtrA
WriteConsoleW
SetEndOfFile
HeapReAlloc
HeapSize
FlushFileBuffers
CreateFileW
GetProcessHeap
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReadConsoleW
GetFileSizeEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
ReadFile
SetFilePointerEx
LCMapStringW
DeleteFileW
GetConsoleOutputCP
GetConsoleMode
DecodePointer
user32
SendMessageA
MessageBoxA
MoveWindow
wsprintfA
GetWindowRect
SetWindowTextA
GetSystemMetrics
EnableWindow
SetFocus
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxParamA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetFileInfoA
SHBrowseForFolderA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ