Static task
static1
Behavioral task
behavioral1
Sample
001.exe
Resource
win7-20240903-en
General
-
Target
001.exe
-
Size
6.9MB
-
MD5
1632b97230c6d7dbc1f4ace409e92ba1
-
SHA1
c884ed2837673b90e1fba77f9b04c8d2e3c1927d
-
SHA256
cca2f9105b2a1998eadcc8cabe7e18704f2c7de1e2c5b03e6a7f652082b81510
-
SHA512
99aa5818fe08ea5717b62108e5c95ddbdca6f31f39e26695ca6079ca7d64b2fe70643a36b72f796e6e3d361da3d92d4764b5b16b5bfb65165354c5e6b3651e8e
-
SSDEEP
196608:d0smbmVIlqWrGTrwW/0dy/SLSJS5wS/H08SWoDpGI:SBbOIlkWcUI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001.exe
Files
-
001.exe.exe windows:4 windows x86 arch:x86
416340397d7047bee023a037eac754b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
strlen
malloc
fopen
fwrite
fclose
memset
getenv
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
kernel32
CreateProcessA
CloseHandle
SetUnhandledExceptionFilter
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 798KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ