Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240708-en
General
-
Target
file.exe
-
Size
248KB
-
MD5
d3ce34e9bb2a33ab3d637e75af2a8bb8
-
SHA1
6c309255f2e701f8325c0ba2eba8fe270c32e44a
-
SHA256
8c207b724ee5d0febaa25aadf3861b31e3740412da99dfd53e5518db47082312
-
SHA512
fdea0ce0da180d2bc06234ec427226fd39a4a16fea23fe527c0b88a9f552cbf9e70885c5f91a35bd8fc78b72266c8fd702ef77404c350f96232d6cc321de382a
-
SSDEEP
3072:6HXfJmQUzKqHjuplWvBspz5phUjbc3kej1HW9UZgBhTARop+Ps1fZAgT2:QPJmQUzKFesXMbaL12D1ArsnAgT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
3c4625b089724a866beb99a0245cb276
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
LocalCompact
GetModuleHandleW
GetTickCount
CreateNamedPipeW
GetProcessHeap
GetConsoleAliasesA
GetConsoleCP
GlobalAlloc
GetSystemDirectoryW
SetFileShortNameW
LoadLibraryW
IsProcessInJob
FatalAppExitW
AssignProcessToJobObject
IsBadCodePtr
ReplaceFileW
GetModuleFileNameW
GlobalUnlock
CreateJobObjectA
GetLastError
GetProcAddress
WriteConsoleInputW
VerLanguageNameW
LoadLibraryA
SetConsoleCtrlHandler
AddAtomW
HeapWalk
EnumResourceTypesW
SetEnvironmentVariableA
GetOEMCP
EnumDateFormatsA
EnumResourceNamesA
GetFileTime
SetProcessShutdownParameters
GetDiskFreeSpaceExW
LCMapStringW
CreateFileW
HeapSize
FlushFileBuffers
FindVolumeClose
PeekConsoleInputW
CreateFileA
HeapReAlloc
GetStringTypeW
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapCreate
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
ReadFile
MultiByteToWideChar
ExitProcess
SetFilePointer
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
GetConsoleMode
GetCPInfo
GetACP
IsValidCodePage
Sleep
RtlUnwind
SetStdHandle
IsProcessorFeaturePresent
WriteConsoleW
CloseHandle
user32
SetCaretPos
CharUpperBuffW
GetMessageExtraInfo
GetMenu
DrawStateW
GetSysColorBrush
gdi32
GetCharWidthI
GetCharABCWidthsI
winhttp
WinHttpOpen
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 32.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ