LIST1101[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
LIST1101.exe
Size 429KB
Sample230619-raznlsfd7w
SHA256 b648a39d90b072f6ddcc51c4385b91c6ccf8f09f07cff7214468efe096315d91
MD5 601325c72030d93334059be1394ccf0d
SHA1 ff4861d068e67cc11046923472e24df4e10f2709
SHA512 be9915f8b845a6a6abc4b32b5bb9db9492c0b52719fb05c7b423c7ef5a25a41596bef7ae5630f05008191986704b9078a2c1686739d0a13c9e258d39cd8cee1b
SSDEEP 12288:M1nWS46CFHhbIM/j6dZd60ErYI4wo10n0ICm8:eWj7F9/jCkYEoI0ICm8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LIST1101.exe

File Explorer

LIST1101.exe

.exe 429KB

LIST1101.exe

IMPHASH 003a54a0fe3c2a4dbf64143004ff22d3
SHA256 b648a39d90b072f6ddcc51c4385b91c6ccf8f09f07cff7214468efe096315d91
MD5 601325c72030d93334059be1394ccf0d
SHA1 ff4861d068e67cc11046923472e24df4e10f2709
SHA512 be9915f8b845a6a6abc4b32b5bb9db9492c0b52719fb05c7b423c7ef5a25a41596bef7ae5630f05008191986704b9078a2c1686739d0a13c9e258d39cd8cee1b
SSDEEP 12288:M1nWS46CFHhbIM/j6dZd60ErYI4wo10n0ICm8:eWj7F9/jCkYEoI0ICm8
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14340

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCreateKeyExW RegOpenKeyExW

shell32

SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

PeekMessageW DispatchMessageW wsprintfA LoadCursorW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW SetDlgItemTextW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW GetDlgItemTextW CharNextA CharPrevW RegisterClassW MessageBoxIndirectW SystemParametersInfoW

gdi32

GetDeviceCaps SetBkColor CreateBrushIndirect SetTextColor SetBkMode SelectObject DeleteObject CreateFontIndirectW

kernel32

GetLastError WaitForSingleObject GetExitCodeProcess RemoveDirectoryW GetTempFileNameW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode CreateProcessW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize CreateFileW MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW WriteFile GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW GetTempPathW