starticon3[.]exe | Triage™

General

Target
starticon3.exe
Size 725KB
Sample250124-d6f99aypbq
SHA256 7bc2928ce06e7db7bfe0bf3f2c2d2ff9df7f0a8041ea8c593dd0b912c1c3d3fd
MD5 e8bbb6d921b79101aea7d906a1798f3d
SHA1 4fd59822cdedd1b194d27d2c01a9cde6222de1bb
SHA512 c525e07c65c7be43aa90568f98253b397919cd0f597b1ba446fed51a578ca1aae4c93fa59e1345b20e3216a676ba35c89c67d6ced6bea68da44a53989fa4d656
SSDEEP 12288:O7q+wuEST6sxwGCwuwn5vE2nyrJppqrNSP9kdrzA9PpXtuRt2BoivOnJztu3vdyB:CqrFvGjF5iZqrQag1t7+nJztuHi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
starticon3.exe

File Explorer

starticon3.exe

.exe 725KB

starticon3.exe

IMPHASH af26cb1625d44d032194d9902e14f12f
SHA256 7bc2928ce06e7db7bfe0bf3f2c2d2ff9df7f0a8041ea8c593dd0b912c1c3d3fd
MD5 e8bbb6d921b79101aea7d906a1798f3d
SHA1 4fd59822cdedd1b194d27d2c01a9cde6222de1bb
SHA512 c525e07c65c7be43aa90568f98253b397919cd0f597b1ba446fed51a578ca1aae4c93fa59e1345b20e3216a676ba35c89c67d6ced6bea68da44a53989fa4d656
SSDEEP 12288:O7q+wuEST6sxwGCwuwn5vE2nyrJppqrNSP9kdrzA9PpXtuRt2BoivOnJztu3vdyB:CqrFvGjF5iZqrQag1t7+nJztuHi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10469

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW GetModuleHandleW GetTickCount GetConsoleTitleA WaitNamedPipeW GlobalAlloc SetFileShortNameW FreeConsole SetConsoleCP GetFileAttributesA lstrcpynW WriteConsoleW ReadFile GetACP VerifyVersionInfoW GetHandleInformation GetProcessHeaps LockResource GetCommMask FoldStringW GetModuleHandleA GetStringTypeW DeleteCriticalSection GetWindowsDirectoryW GetPrivateProfileSectionW FindActCtxSectionStringW LCMapStringW DeleteFileA lstrcpyA WriteTapemark BuildCommDCBAndTimeoutsA lstrlenA DeleteTimerQueueEx GetProcAddress CreateMutexW GetLastError HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection HeapCreate CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage Sleep MultiByteToWideChar RtlUnwind SetStdHandle FlushFileBuffers HeapSize LoadLibraryW CreateFileW

user32

GetCaretPos

advapi32

AdjustTokenPrivileges AreAnyAccessesGranted BackupEventLogA RegQueryInfoKeyW

msimg32

TransparentBlt

Resubmissions

Sharing