Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240729-en
General
-
Target
file.exe
-
Size
414KB
-
MD5
298c2dd860d8e3133d9cf250741eeeaa
-
SHA1
aade1d44df4950bf807fe44c30ef419e2a9a22b6
-
SHA256
777a54bfc70de07fee25e9f2d527a242fb7681f6e86231811f69f030ab00c961
-
SHA512
0b45fde9c01eea1f6828152f98d5c81999ee1f2618e23e0c555dc816b5651662609608356c9259d9da0de5dd50f5db20ad04f09da1c2038665d8d4895f341ce0
-
SSDEEP
6144:3N1zTVURDtYOCQSiumTaYkK2xspAbtlXS5FXCnFk:9FTVUFtpCnpfKxAzXESC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
aa1df04aa31b8b76e6674a21e4ac0295
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetCurrentProcess
InterlockedCompareExchange
SetVolumeMountPointW
CreateHardLinkA
GetModuleHandleW
CreateNamedPipeW
EnumCalendarInfoExW
GetNumberFormatA
CreateActCtxW
TlsSetValue
LoadLibraryW
GetLocaleInfoW
GetCalendarInfoA
CreateEventA
GetFileAttributesA
GetTimeFormatW
GetModuleFileNameW
FindNextVolumeMountPointW
GetTempPathW
GetShortPathNameA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
GlobalUnfix
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
GetProcAddress
GetLongPathNameA
PeekConsoleInputW
EnumSystemCodePagesW
GetConsoleDisplayMode
SetComputerNameA
GetCommState
GetProcessVersion
SetThreadPriorityBoost
InterlockedExchangeAdd
CreateFileMappingA
LocalAlloc
GetFileType
FoldStringW
SetEnvironmentVariableA
EnumDateFormatsA
GetProcessShutdownParameters
LoadLibraryExA
VirtualProtect
GetFileTime
WaitForDebugEvent
OpenEventW
SetFileShortNameA
GetVersionExA
GetDiskFreeSpaceExW
GetWindowsDirectoryW
LocalFree
LCMapStringW
CommConfigDialogW
CloseHandle
GetStringTypeW
CreateFileW
IsProcessorFeaturePresent
MultiByteToWideChar
WriteConsoleW
InterlockedIncrement
GetConsoleAliasExesLengthA
SetEndOfFile
GetConsoleAliasExesA
EnumCalendarInfoA
GlobalMemoryStatus
LoadModule
SetDefaultCommConfigA
SetStdHandle
FlushFileBuffers
HeapAlloc
HeapReAlloc
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
WriteFile
HeapCreate
HeapFree
TlsAlloc
TlsGetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
user32
DrawStateA
SetCaretPos
LoadMenuA
CharUpperA
GetMenu
InsertMenuItemW
GetWindowLongW
GetSysColor
GetMenuStringA
gdi32
GetBkMode
GetCharWidthFloatA
CreateDCA
GetCharWidth32A
GetTextMetricsA
GetTextCharset
GetCharWidthI
winhttp
WinHttpConnect
Sections
.text Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 32.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ