ldr_clp[.]exe | Triage™

General

Target
ldr_clp.exe
Size 180KB
Sample241025-pexnpsyfqa
SHA256 46604751c20aebeac273f00f5614a5b6ac72e26a9486e006fb37dd90cf22f6b8
MD5 6248c79d3f2a0b5228d28b3d98c0aa44
SHA1 bf2c6ef96046c5a23ed0cc9353258047688026a8
SHA512 7c557f81302ce0bea59760e86461df28cfd8c770966916d04367045b407a2f86f4270c8f8804a7ae715b45f35c7f2c341091af9841dd92bbe6f3db1fc25feb08
SSDEEP 3072:aioTucolLj8fuPhWHcPSZ5OdIxnwUc35M6JB4xSYKhPxxYjU2gvZ1Z:btxSEW8PW57nwUc3GXN+Z1Z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ldr_clp.exe

File Explorer

ldr_clp.exe

.exe 180KB

ldr_clp.exe

IMPHASH 4f9bf9e9203f3d7f99d7ae90a96369c8
SHA256 46604751c20aebeac273f00f5614a5b6ac72e26a9486e006fb37dd90cf22f6b8
MD5 6248c79d3f2a0b5228d28b3d98c0aa44
SHA1 bf2c6ef96046c5a23ed0cc9353258047688026a8
SHA512 7c557f81302ce0bea59760e86461df28cfd8c770966916d04367045b407a2f86f4270c8f8804a7ae715b45f35c7f2c341091af9841dd92bbe6f3db1fc25feb08
SSDEEP 3072:aioTucolLj8fuPhWHcPSZ5OdIxnwUc35M6JB4xSYKhPxxYjU2gvZ1Z:btxSEW8PW57nwUc3GXN+Z1Z
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

35620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject GetTempPathA CloseHandle GetConsoleWindow SleepEx CreateProcessA WriteConsoleW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetLastError GetModuleHandleW GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetFileSizeEx SetFilePointerEx GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapFree HeapAlloc LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW HeapReAlloc IsValidCodePage SetEndOfFile

user32

ShowWindow

winhttp

WinHttpCloseHandle WinHttpReceiveResponse WinHttpConnect WinHttpCrackUrl WinHttpOpenRequest WinHttpReadData WinHttpOpen WinHttpSendRequest

Sharing