DeviceProperties[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeviceProperties.exe
Size

89KB
MD5

ca0473b448ddd32d95d5b157bb2c6cfa
SHA1

247cc33813382310c6e18899c81c9a86a875cb1d
SHA256

75b7edf2f114f6fbf776c538687b1930111748a73d9331d456ebfefad069c7df
SHA512

8ff3f9e06d50684d7035c13e22579aea011b347f9168dc023be8651ff0ff699b4e644ca654b971bf40176e90afb2c4ba3ebc65f996580e8e66965397ac402192
SSDEEP

1536:Y9g2y5nNWLJpBpTybQ74i6u0dw9Wegi85mChdlzwCxi65U:kg55NOFpTyIcuz9WzF4Chdlzri6e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeviceProperties.exe

Files

DeviceProperties.exe
.exe windows x86

a3ac07f97819cf47c8947cd070af8c6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
LoadLibraryW
GetProcAddress
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
Sleep
TerminateProcess

user32

IsWindow

msvcrt

_initterm
_cexit
_controlfp
_except_handler4_common
__setusermatherr
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
_wtoi64
__p__fmode
?terminate@@YAXXZ

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ