Static task
static1
Behavioral task
behavioral1
Sample
001.exe
Resource
win7-20240705-en
General
-
Target
001.exe
-
Size
501KB
-
MD5
914fc1daaf606db6468828ae73f23475
-
SHA1
79c971f0db70211ec8cf5ca25347b11cab4e1e15
-
SHA256
ec2ae1fb4b42a33ccc6180c03b11f038c715888c1d74d7d3df29521ff60c8d65
-
SHA512
5f4e4340d16984e780fd267925d0e4b6f182bd859e1e89526a85be0a3fb631284f166a9a618bc0500103b55e078a15f4e58efbf01a2a83c6bbc433100b231766
-
SSDEEP
12288:+fx/eZe3fjd4inis1fCPgrHqXYlN7h0o7rw:EMe373nzWgrHDb7h/I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001.exe
Files
-
001.exe.exe windows:5 windows x86 arch:x86
96feef5db192fccf32db40a0e8148f5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutReset
waveOutOpen
waveOutUnprepareHeader
waveOutWrite
waveOutPrepareHeader
kernel32
DeleteFileW
LoadLibraryW
GetProcAddress
CreateMutexW
GetLastError
ExitProcess
HeapFree
GetStartupInfoW
GetTempPathW
Wow64EnableWow64FsRedirection
Sleep
CreateThread
HeapAlloc
GetProcessHeap
GetModuleHandleW
FreeLibrary
lstrcpyW
IsWow64Process
GetModuleFileNameW
lstrlenW
CopyFileW
CreateFileW
WriteFile
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
CloseHandle
GetCurrentProcessId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcess
user32
SendMessageW
CreateWindowExW
SetWindowPos
FindWindowExW
DefWindowProcW
EnumDisplayMonitors
ExitWindowsEx
SetWindowTextW
EnumChildWindows
GetWindowRect
SetMenu
UnhookWindowsHookEx
RegisterClassExW
FindWindowW
LoadCursorW
SetWindowsHookExW
DrawTextW
PostQuitMessage
SystemParametersInfoW
UpdateWindow
ShowCursor
MessageBoxW
GetDC
ReleaseDC
UnionRect
CallNextHookEx
ShowWindow
EnumWindows
MoveWindow
gdi32
GetDIBColorTable
SelectObject
CreateSolidBrush
DeleteObject
SetBkMode
CreateCompatibleDC
DeleteDC
SetTextColor
CreateFontW
StretchBlt
CreateDIBSection
CreateCompatibleBitmap
BitBlt
GetObjectW
GetDIBits
advapi32
RegCloseKey
RegSetValueExW
RegCreateKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ShellExecuteW
vcruntime140
_except_handler4_common
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memcpy
api-ms-win-crt-heap-l1-1-0
free
malloc
_set_new_mode
_callnewh
api-ms-win-crt-runtime-l1-1-0
_initterm_e
exit
_exit
_seh_filter_exe
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_get_narrow_winmain_command_line
_initialize_narrow_environment
_initterm
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_set_app_type
api-ms-win-crt-math-l1-1-0
__libm_sse2_sinf
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 466KB - Virtual size: 465KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ