progetto[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
progetto.exe
Size 294KB
Sample231010-ktbbssec89
SHA256 31f983668db02626b9c65b0f2fc7d14b59400c485d4ffc88418f3f76bf62ef85
MD5 6d32ac033adb9b55fb46ce1e5ed10c46
SHA1 e1465c0f776de37b7ac8542ead24466a26da2f47
SHA512 b51b5aaa3eba789efc25d83e0ef8171935d191cef7bb7d5ab8ae958804a4094058aef1848a04bbea11dd38f1c0fcf41c5115bb03dcc2c8e6f70cc319b5af06a0
SSDEEP 3072:Ol2zlWKeqCK79VaVvYYjToBX0RQHUs3Zox1EsMD/aT:noKeqC6sHT60Cv3ZoJM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
progetto.exe

File Explorer

progetto.exe

.exe 294KB

progetto.exe

IMPHASH 3438886e6009a26e0534b002f5a2db0a
SHA256 31f983668db02626b9c65b0f2fc7d14b59400c485d4ffc88418f3f76bf62ef85
MD5 6d32ac033adb9b55fb46ce1e5ed10c46
SHA1 e1465c0f776de37b7ac8542ead24466a26da2f47
SHA512 b51b5aaa3eba789efc25d83e0ef8171935d191cef7bb7d5ab8ae958804a4094058aef1848a04bbea11dd38f1c0fcf41c5115bb03dcc2c8e6f70cc319b5af06a0
SSDEEP 3072:Ol2zlWKeqCK79VaVvYYjToBX0RQHUs3Zox1EsMD/aT:noKeqC6sHT60Cv3ZoJM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19851

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleExA CommConfigDialogA FindResourceW DeleteVolumeMountPointA OpenJobObjectA ReadConsoleA InterlockedDecrement SetDefaultCommConfigW QueryPerformanceCounter GetEnvironmentStringsW InterlockedCompareExchange WriteConsoleInputA OpenSemaphoreA CreateHardLinkA SetTapeParameters SetThreadUILanguage FindNextVolumeMountPointA GetConsoleAliasesA GetConsoleAliasesLengthA ConvertFiberToThread ReadConsoleW GetCompressedFileSizeW GetConsoleAliasExesW WaitNamedPipeW WriteFile EnumTimeFormatsW GetCommandLineA GetDriveTypeA GetVolumePathNameW FindResourceExA GetConsoleCP GlobalAlloc LoadLibraryW GetConsoleMode GetLocaleInfoW ReadConsoleInputA CopyFileW GetCalendarInfoA SetConsoleCP GetFileAttributesA WriteConsoleInputW SetConsoleMode SetSystemPowerState IsDBCSLeadByte CreateMailslotW GetShortPathNameA GetNamedPipeHandleStateW InterlockedExchange GetStartupInfoA GetLastError SetLastError ReadConsoleOutputCharacterA SetVolumeLabelW RemoveDirectoryA EnumSystemCodePagesW FreeUserPhysicalPages SetComputerNameA FindClose GetAtomNameA SetCalendarInfoW MoveFileA SetConsoleCtrlHandler AddAtomA HeapWalk SetCommMask GetPrivateProfileSectionNamesA GetOEMCP FindNextFileA _lread GetModuleHandleA FreeEnvironmentStringsW GetStringTypeW VirtualProtect EnumDateFormatsW PeekConsoleInputA FindFirstVolumeA GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW DeleteFileW WriteConsoleW GetComputerNameA GetTempFileNameW EnumSystemCodePagesA GetCommandLineW HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer WideCharToMultiByte HeapReAlloc HeapSetInformation GetStartupInfoW RaiseException IsProcessorFeaturePresent HeapCreate GetStdHandle GetModuleFileNameW EncodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetCPInfo GetACP IsValidCodePage CloseHandle GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle FlushFileBuffers RtlUnwind HeapSize LCMapStringW MultiByteToWideChar CreateFileW

user32

CharUpperA CharUpperBuffA

gdi32

GetTextFaceA

advapi32

RevertToSelf

winhttp

WinHttpWriteData