dasdasd1[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
dasdasd1.exe
Size 20KB
Sample231112-pyex1afc8t
SHA256 faff0d3b869b1e2f5edeceac88a567f3c8fea0570b135e9b0924b779dfbf53c7
MD5 b830d13b1149b3bfadea667ca5e29563
SHA1 2748e0eb72ca4caebd1efcd69cc5b0d9fb214d6a
SHA512 7deffa0fabb8529d6510796b5562acf14d8f7cfb6b921b6d1083d280e8fd59462095bd2aaf0c99bd557f5e9e6315438eb47b885bda159472c0b83445b3931ad1
SSDEEP 384:hjacVd5AzjMJkKRy+KAVRNsfreu3zx/arWDu:JX/goXy+5RNsfSu3z5aS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dasdasd1.exe

File Explorer

dasdasd1.exe

.exe 20KB

dasdasd1.exe

IMPHASH 0b9e4fe6a2919613594311534f73ab47
SHA256 faff0d3b869b1e2f5edeceac88a567f3c8fea0570b135e9b0924b779dfbf53c7
MD5 b830d13b1149b3bfadea667ca5e29563
SHA1 2748e0eb72ca4caebd1efcd69cc5b0d9fb214d6a
SHA512 7deffa0fabb8529d6510796b5562acf14d8f7cfb6b921b6d1083d280e8fd59462095bd2aaf0c99bd557f5e9e6315438eb47b885bda159472c0b83445b3931ad1
SSDEEP 384:hjacVd5AzjMJkKRy+KAVRNsfreu3zx/arWDu:JX/goXy+5RNsfSu3z5aS
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7180

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

VirtualProtect VirtualFree VirtualAlloc Sleep RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlCaptureContext

msvcp140

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?good@ios_base@std@@QEBA_NXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?uncaught_exception@std@@YA_NXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

wininet

InternetCloseHandle HttpQueryInfoW InternetOpenUrlW InternetReadFile InternetOpenW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy __std_terminate __C_specific_handler __std_exception_destroy __current_exception __current_exception_context memset _CxxThrowException memcpy

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode free malloc

api-ms-win-crt-runtime-l1-1-0

_c_exit _initterm_e _cexit _initterm _get_initial_narrow_environment _initialize_narrow_environment __p___argv _initialize_onexit_table _register_onexit_function _crt_atexit terminate __p___argc _configure_narrow_argv exit _set_app_type _exit _seh_filter_exe _invalid_parameter_noinfo_noreturn _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale