TestNav[.]exe | Triage

Resubmissions

27/02/2024, 15:35

240227-s1cr7scf72 3

27/02/2024, 15:31

240227-sx9yjace83 7

Sharing

Copy URL Twitter E-mail

General

Target

TestNav.exe
Size

507KB
MD5

9d2889ca20add9acae01ee84fd44ca39
SHA1

b1a7cee8a5768917a7ebe4704ff5eb1e11e23bd4
SHA256

0c100aa93ae04d86986c3337ec6eda452150233656eb26d50f3d2c50c4f808d5
SHA512

53d7fef45d3ab9cbf5f0a4dc470f3dfae99e777bdc6da6accf39182dddfe92a0869fe61ca0dc6ec6a3d062a39f220841f4336470291d5c5eaba47e20c900ccb0
SSDEEP

6144:KjWWnh5csrzmCqu2MV1AiQ6ba7pl/rPo1027ldkDoh3N7bgX3:KSyhSsOE1tQd7pl/q0IdMoXgX3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TestNav.exe

Files

TestNav.exe
.exe windows:6 windows x64 arch:x64

fe48085963bc45cce59e29721160657e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

jpackageapplauncherw.pdb

Imports

user32

AllowSetForegroundWindow
MessageBoxW

shell32

CommandLineToArgvW

kernel32

WideCharToMultiByte
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
GetCurrentDirectoryW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapAlloc
HeapFree
SetEnvironmentVariableW
CloseHandle
GetLastError
WaitForSingleObject
LoadLibraryExW
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
AllocConsole
AttachConsole
FreeLibrary
GetModuleHandleExW
GetProcAddress
LoadLibraryW
LocalFree
FormatMessageW
CreateFileW
FindClose
FindNextFileW
GetFileAttributesW
SetLastError
GetCommandLineW
GetExitCodeProcess
CreateProcessW
SetDllDirectoryW
GetEnvironmentVariableW
GetSystemDirectoryW
GetModuleFileNameW
MultiByteToWideChar
RtlUnwind
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
GetFullPathNameW
GetDriveTypeW
ExitProcess
GetStdHandle
WriteFile

Exports

Exports

jvmLauncherGetAPI

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

fe48085963bc45cce59e29721160657e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

shell32

kernel32

Exports

Exports

Sections

.text Size: 265KB - Virtual size: 265KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 7KB - Virtual size: 13KB

.pdata Size: 15KB - Virtual size: 14KB

.rsrc Size: 83KB - Virtual size: 82KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 265KB - Virtual size: 265KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 7KB - Virtual size: 13KB

.pdata
Size: 15KB - Virtual size: 14KB

.rsrc
Size: 83KB - Virtual size: 82KB

.reloc
Size: 4KB - Virtual size: 3KB