Static task
static1
Behavioral task
behavioral1
Sample
start.exe
Resource
win7-20240903-en
General
-
Target
start.exe
-
Size
384KB
-
MD5
3318168ae9a79bebdbca98281974ea70
-
SHA1
a1c84b04cd756628f955abd4dec707d946d9a84f
-
SHA256
5d32e44b85fcb2b674764ef904ba64a16d4533591b7d1ada4d760cdb603db706
-
SHA512
ae3e42d079055d75f4c1dc8afe9c994e9d42fbd1e34eb51976f7a8b74895eebd04411649c7661f59286967f2a72e730f8bd2efb670c30335622250dcdd45de61
-
SSDEEP
6144:kmQ5QhH2pP+YC4KqpmrxUHnYXK1h3Bt9qUnHmwZbh3XpFgO2/31PHC/kWBvq9l1:kmQaHOP+Y/KqpmNUHnhh7ZbZ6/31PHtN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource start.exe
Files
-
start.exe.exe windows:5 windows x86 arch:x86
c11987da7bc144511d933916c7331175
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
OutputDebugStringA
FreeConsole
CreateMutexW
InitializeCriticalSection
AssignProcessToJobObject
AreFileApisANSI
SetFilePointerEx
CreateFileW
DeleteAtom
AddAtomW
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
user32
GetWindowLongA
wvsprintfA
SetWindowPos
FindWindowA
RedrawWindow
GetWindowTextA
EnableWindow
GetSystemMetrics
IsWindow
CheckRadioButton
UnregisterClassA
SetCursor
GetSysColorBrush
DialogBoxParamA
DestroyAcceleratorTable
DispatchMessageA
TranslateMessage
AppendMenuA
SendDlgItemMessageA
GetDlgItem
MapVirtualKeyW
GetWindowContextHelpId
GetMenuInfo
IsCharAlphaW
GetDCEx
IntersectRect
GetDC
MapVirtualKeyExW
ClientToScreen
OffsetRect
UpdateWindow
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 297KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ