Static task
static1
Behavioral task
behavioral1
Sample
printf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
printf.exe
Resource
win10v2004-20240426-en
General
-
Target
printf.exe
-
Size
31KB
-
MD5
1e39dd18934939d82a7a58e9916df7f4
-
SHA1
12794cec0e55d6a6f67238f931fb86d2a8c68f8f
-
SHA256
acbd36f9de4508191ff97eeb9c62518a1088ce8afc71b46717066ae19f516690
-
SHA512
d1cc48e6c98a4282c27920f42afe43d33dfca8974308ee9e1bf6a4e8d024208ed676b708ab77f6a1aa6164d17823478d5428adeb5263cd8959a02a5b6ed2bef4
-
SSDEEP
768:P1xlpsP1vjxMMnxgav6wEPXQwnEAGoFFDqOOPhyqVF:EPnMUHwELO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource printf.exe
Files
-
printf.exe.exe windows:4 windows x86 arch:x86
a0d73f57f792c1bda610fd25505c14c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msys-1.0
__errno
__main
_ctype_
abort
atexit
calloc
cygwin_conv_to_posix_path
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fopen
fputs
free
fscanf
fwrite
getc
getenv
malloc
memcpy
memset
putc
realloc
setlocale
strchr
strcmp
strcpy
strerror
strlen
strncmp
strtod
ungetc
vsnprintf
msys-iconv-2
libiconv
libiconv_open
msys-intl-8
__printf__
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_textdomain
libintl_vfprintf
kernel32
GetModuleFileNameA
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data_cy Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 636B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE