Static task
static1
Behavioral task
behavioral1
Sample
hoge.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
hoge.exe
Resource
win10v2004-20240226-en
General
-
Target
hoge.bin
-
Size
621KB
-
MD5
be87ad5596852c9930270778e9eced54
-
SHA1
34a1842d2fd4dbcdc27b892d18ad920ac9d03826
-
SHA256
38c17f2c490cee233f17e6484a1f3c25f3bff8d99ea0d6010f720b848d6a223e
-
SHA512
a16e49beb95f461ff5d4af63017bdcd9844800e8037d43942e28e0a3dfa71ceb0808e5020f955380902fdb4c9887ed6e092cfce9a9cf24f6be2e3e9586dbef04
-
SSDEEP
12288:zE50GSHrG6W42JcycysY0V3D9wCV+2nXGwnUP345WRgG3OkGGs/Lwmm:o+GSHrG6W42JcychY0FD9wCVBHw3yeJF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hoge.bin
Files
-
hoge.bin.exe windows:4 windows x64 arch:x64
46702e615a96538f4944f7d15b37d4d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
HeapCreate
HeapAlloc
GetModuleHandleA
CreateEventA
WaitForSingleObject
CloseHandle
HeapDestroy
GetModuleFileNameW
lstrlenW
HeapFree
GetProcessHeap
Sleep
GetSystemTimeAsFileTime
user32
LoadIconW
CreateMenu
LoadBitmapW
DrawMenuBar
GetClientRect
FillRect
RegisterClassW
CreateWindowExW
DestroyMenu
ReleaseDC
CharUpperBuffW
GetCursor
DestroyIcon
DispatchMessageW
IsZoomed
CreateAcceleratorTableW
DrawFocusRect
IsIconic
GetClassInfoExW
SetTimer
DeleteMenu
IsDialogMessageW
InsertMenuW
DrawIcon
SetScrollPos
CopyImage
GetClassInfoW
DestroyCursor
DefMDIChildProcW
EndMenu
SetMenuItemInfoW
GetScrollPos
GetMenuStringW
DefFrameProcW
FrameRect
ShowCaret
GetDlgCtrlID
GetScrollInfo
PeekMessageW
LoadCursorW
GetWindowTextW
GetSystemMenu
PostMessageW
EndPaint
GetMenuItemInfoW
GetDCEx
EnableWindow
GetScrollRange
ShowWindow
BeginPaint
DestroyWindow
LoadStringW
KillTimer
MsgWaitForMultipleObjectsEx
CreateIcon
gdi32
StretchBlt
Pie
RoundRect
CreateDCW
Polygon
SetBkMode
RectVisible
SetAbortProc
PolyBezierTo
CreateCompatibleBitmap
GetWindowOrgEx
CreateSolidBrush
AngleArc
GetTextMetricsW
CreateICW
GetEnhMetaFileHeader
SetTextColor
GetStockObject
RestoreDC
SetRectRgn
CreatePalette
MoveToEx
ole32
OleUninitialize
CoUninitialize
OleInitialize
CoCreateInstance
IsEqualGUID
CoTaskMemFree
CoInitialize
CoTaskMemAlloc
oleaut32
VariantCopyInd
SafeArrayGetUBound
VariantCopy
SafeArrayGetElement
VariantInit
SafeArrayCreate
SafeArrayPtrOfIndex
GetErrorInfo
SafeArrayGetLBound
SysAllocStringLen
SafeArrayUnaccessData
SysFreeString
SysReAllocStringLen
SafeArrayAccessData
VariantClear
SafeArrayPutElement
VariantChangeType
msvcrt
memcpy
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
exit
_acmdln
_initterm
qsort
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
wcsrchr
memset
_amsg_exit
wcschr
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbss Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ