tldextract[.]exe | Triage™

General

Target
tldextract.exe
Size 105KB
Sample231013-ckzn2acc22
SHA256 3e3fd485c77d54edd87cff6ab7567d3c072dc9c2f3af88adcc74564e65c93f5a
MD5 b2d111941d986934e53fe1cf48ed9fa9
SHA1 e705966d3faab62be30c8d3d2b9b7b5d76d17506
SHA512 62b6f75455306fa2f89be13e1c30d9612244c6a8808ed8265113310696d3ba2f013b10cc343531e41367f37ef5406506e042336c65f4723804434eaffeb55557
SSDEEP 3072:CVS1/eI4pnTfEFYJE3nwzPdCNU/efHYTo+zZ:aEHGnTcFYOXwJigTV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tldextract.exe

File Explorer

tldextract.exe

.exe 105KB

tldextract.exe

IMPHASH eb2314ea789ef583e2167890ef42c85b
SHA256 3e3fd485c77d54edd87cff6ab7567d3c072dc9c2f3af88adcc74564e65c93f5a
MD5 b2d111941d986934e53fe1cf48ed9fa9
SHA1 e705966d3faab62be30c8d3d2b9b7b5d76d17506
SHA512 62b6f75455306fa2f89be13e1c30d9612244c6a8808ed8265113310696d3ba2f013b10cc343531e41367f37ef5406506e042336c65f4723804434eaffeb55557
SSDEEP 3072:CVS1/eI4pnTfEFYJE3nwzPdCNU/efHYTo+zZ:aEHGnTcFYOXwJigTV
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

16972

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess GetCommandLineW SearchPathW SetInformationJobObject CreateProcessW SetHandleInformation WaitForSingleObject WaitForSingleObjectEx AssignProcessToJobObject FormatMessageW GetExitCodeProcess GetModuleFileNameW QueryInformationJobObject MultiByteToWideChar GetStartupInfoW GetTempPathW CreateJobObjectA GetStdHandle GetLastError SetStdHandle GetFileType SetConsoleCtrlHandler SetCurrentDirectoryW CloseHandle HeapSize GetProcessHeap SetEndOfFile SetEnvironmentVariableW HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetStringTypeW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer DecodePointer TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount GetCommandLineA RtlUnwindEx HeapSetInformation GetVersion HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc GetProcAddress GetModuleHandleW WriteFile SetHandleCount DeleteCriticalSection Sleep LCMapStringW ReadFile SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA WideCharToMultiByte QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CreateFileW LoadLibraryW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers CompareStringW WriteConsoleW

shlwapi

StrStrIW PathRemoveFileSpecW PathCombineW

Sharing