Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240903-en
General
-
Target
file.exe
-
Size
366KB
-
MD5
0a42cbe3d32c42cfccf044a27e02b7ff
-
SHA1
b1414b892bfd63920dee379642c872a445cd1470
-
SHA256
cf33803ead9f221274a5ef6bfd8121dce055921bbf7b8053624f22277fb00f90
-
SHA512
1201a82fc26ac577db5a2c2280dc0dce0f7ba35bc75723165476bb3d9757dedce0b15f094cb2b19afd3e50a1d69a905ab7771f4a20644289685f06d5e022ec89
-
SSDEEP
6144:/vUtDoXMshft/ho6pOqk0pW3xKPFQ6vcmG3/8yJ7QAu7:/st8X7hoUVkaxPFQ6nKU277u7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
3978bc23ce46139d07304b225b33a7c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLocaleInfoA
DeleteVolumeMountPointA
InterlockedIncrement
GetConsoleAliasA
SetDefaultCommConfigW
GetComputerNameW
GetProcessPriorityBoost
GetModuleHandleW
GetDateFormatA
GetEnvironmentStrings
LoadLibraryW
ReadProcessMemory
GetTimeFormatW
CreateProcessA
GetAtomNameW
GetStartupInfoW
GetShortPathNameA
SetLastError
PulseEvent
SearchPathA
SetFileAttributesA
BuildCommDCBW
GetNumaHighestNodeNumber
LoadLibraryA
UnhandledExceptionFilter
InterlockedExchangeAdd
LocalAlloc
AddAtomA
FoldStringW
OpenFileMappingW
WriteConsoleOutputAttribute
FindFirstVolumeA
FindAtomW
UnregisterWaitEx
CreateFileA
WriteConsoleW
GetProcAddress
GetCommandLineW
MultiByteToWideChar
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetLastError
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
WriteConsoleA
GetConsoleOutputCP
GetModuleHandleA
user32
GetClassLongW
gdi32
GetBitmapBits
Sections
.text Size: 253KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ