SystemPropertiesHardware[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SystemPropertiesHardware.exe
Size

80KB
MD5

bb1e4126282097bcdeb1419e26e453bc
SHA1

756c1d6037907a0cdc5e26bef4eb79df4ee4f7d7
SHA256

b2bc011bc3524bd47f092c6005e986123e1e7ea141a30d6cb15831fde64a777f
SHA512

b0e7dcfc0f84c315a156c276473bb1afd190636857a8f7d1877a637599fc833ac43f7bdd21cae169e181d61a379788cee7f8c55b266c28688f0e5a587bf8b7d5
SSDEEP

1536:ZYtREC/rMcgEPJV+G57ThjEC0kzJP+V5JA:ezECTMpuDhjRVJGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SystemPropertiesHardware.exe

Files

SystemPropertiesHardware.exe
.exe windows x86

875666ad2f30ace9c1b97fa5f8c9272f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs

sysdm.cpl

DisplaySYSDMCPL

kernel32

GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ