Loader
Static task
static1
Behavioral task
behavioral1
Sample
test.exe
Resource
win10v2004-20240412-en
General
-
Target
test.exe
-
Size
147KB
-
MD5
af4282b3bfc69a33c72e8a8be728e071
-
SHA1
678730b1dc121faedf1c371b6abdbf17cf5b6fad
-
SHA256
4bdeeddbc111456d2b4ec9f5ad5f1e00b02c1ff861dc1c26eaec6ccba0a221ff
-
SHA512
fbede6fc31c9b1e4d83282b49b1b4664d05ef4e658620cc2270f2f34afb15990f84b8d7c0b7dfa886d1e79722fda20ed4681f2c6904fa9fb891ba85bc67829cb
-
SSDEEP
3072:QajePviEaEdJ5L1/6OZqhEedtDyXRda5iF:VyHiEJJZQEqW8iF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource test.exe
Files
-
test.exe.exe windows:5 windows x86 arch:x86
44e61a9d6df2f947dd22cd25313bbf04
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
WriteFile
WideCharToMultiByte
Sleep
MultiByteToWideChar
GetLastError
GetModuleFileNameA
CloseHandle
CreateFileW
WriteConsoleW
GetStringTypeW
LCMapStringW
HeapReAlloc
HeapSize
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
SetFilePointerEx
GetConsoleMode
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
GetCurrentThreadId
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
SetStdHandle
FlushFileBuffers
OutputDebugStringW
Exports
Exports
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ