Static task
static1
Behavioral task
behavioral1
Sample
makeinfo.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
makeinfo.exe
Resource
win10v2004-20240426-en
General
-
Target
makeinfo.exe
-
Size
240KB
-
MD5
bb662b92d9a6effb897fc3f90db727b6
-
SHA1
365ebafcbf68295de86fc5e6b68b02ed14dc7ec5
-
SHA256
86c5948605439b7918a576d5b32cef8360d294e9f291197d3be39a4ca0604d73
-
SHA512
d1d7feb182d72fe7d83001d866919b0f2638badc1845e6f33b240fe7594b8284e792579ed8c712ad4cf14802b1f4f53d3ae1cef987816488e4459e4cfeb67ec5
-
SSDEEP
6144:K6+8XFY6hu8ekzqoCkm1tPyDipkYWGWGTZ8TAkifHKG+Z:O8SkmLNqGbMif5c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource makeinfo.exe
Files
-
makeinfo.exe.exe windows:4 windows x86 arch:x86
cbac4774593c79c6c1059b41751b36e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msys-intl-8
__printf__
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_sprintf
libintl_textdomain
libintl_vfprintf
libintl_vsprintf
msys-1.0
__assert
__errno
__main
__mb_cur_max
_ctype_
abort
access
atoi
calloc
close
cygwin_conv_to_posix_path
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fgets
fileno
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
getc
getcwd
getenv
getpwnam
isatty
localtime
malloc
mbtowc
memchr
memcpy
memmove
memset
mkdir
open
pathconf
perror
putc
puts
qsort
read
realloc
setenv
setlocale
sprintf
sscanf
stat
strcat
strchr
strcmp
strcoll
strcpy
strerror
strlen
strncasecmp
strncat
strncmp
strncpy
strrchr
time
ungetc
unlink
unsetenv
vsnprintf
write
kernel32
GetModuleFileNameA
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data_cy Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE