SEPTILLION[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SEPTILLION.exe
Size 2.0MB
Sample240801-121jnaydpm
SHA256 54897980815cdda2fa774322f84bbe5576afedef9b0ef7206298291dec678f48
MD5 a37efb8073e32ae2d9faa9c41a86b9da
SHA1 f7b812bea6969d75b44c950d6e6e1d9142a63e4c
SHA512 884d852cdbbb15a8b1d2eb460dc4481ab027a2f55313ece2c8db7370312529487cbb460883f34350e7cb0cdb80fa0db9dd431f4527a17840e731bad42ed84be7
SSDEEP 12288:E32L0+rGwMSbmnBmEc+l3S/HnquOkkr5UG7b/u0XeGkpiXhyJ4OeuTaIjuGiFKfH:E32IErMSbmnwzk5U2bXJkTJ4OeCGFWH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SEPTILLION.exe

File Explorer

SEPTILLION.exe

.exe 2.0MB

SEPTILLION.exe

IMPHASH 5e6e50fa686b93f7a505d8902bc448e6
SHA256 54897980815cdda2fa774322f84bbe5576afedef9b0ef7206298291dec678f48
MD5 a37efb8073e32ae2d9faa9c41a86b9da
SHA1 f7b812bea6969d75b44c950d6e6e1d9142a63e4c
SHA512 884d852cdbbb15a8b1d2eb460dc4481ab027a2f55313ece2c8db7370312529487cbb460883f34350e7cb0cdb80fa0db9dd431f4527a17840e731bad42ed84be7
SSDEEP 12288:E32L0+rGwMSbmnBmEc+l3S/HnquOkkr5UG7b/u0XeGkpiXhyJ4OeuTaIjuGiFKfH:E32IErMSbmnwzk5U2bXJkTJ4OeCGFWH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

817361

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\kafer\source\repos\SEPTILLION\x64\Debug\SEPTILLION.pdb

kernel32

Sleep CreateThread FreeConsole SetEndOfFile CreateFileW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LocalFree GetLocaleInfoEx EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent RaiseException QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead GetStartupInfoW GetModuleHandleW GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetProcAddress RtlPcToFileHeader RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList GetModuleFileNameW LoadLibraryExW SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree HeapSize HeapValidate GetSystemInfo GetModuleHandleExW GetStdHandle WriteFile ExitProcess GetCommandLineA GetCommandLineW GetCurrentThread HeapReAlloc HeapQueryInformation GetFileType OutputDebugStringW WriteConsoleW SetConsoleCtrlHandler GetTempPathW FlsAlloc FlsGetValue FlsSetValue FlsFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW RtlUnwind

user32

MessageBoxW EnumWindows GetSystemMetrics IsIconic IsWindowVisible SetWindowPos

shell32

ShellExecuteW

Name

.textbss

Size

Virtual Size

777KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

310KB

Virtual Size

309KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

80KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

1024B

Virtual Size

548B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SEPTILLION.exe

kernel32

user32

shell32

generic