New Project 1[.]exe | Triage

Sharing

General

Target

New Project 1.exe
Size

25.8MB
MD5

62790fdc3f6c5f9f39ff7ebda6f39dbc
SHA1

83c77e11d19a2a9112aa6e0949b1fce818626116
SHA256

413a21a22075b24b4d3874c42b7d558ab874b9155b4f9a2ae164737fb0d4c0ff
SHA512

842930b471b88be82fe535666517e4b39b73e12f7fc0bead3abfe6a791fdcf2e45f5766b7af8c2341e41f9413314bd3d72d79af67c894e5d52d72abb28f3804d
SSDEEP

393216:i05l6ltjvQ9zsDsxDWXHuiqYZH1nhrpSW0i3RhKNku8E+:+lt7QxxDW+jYvhWy678E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Project 1.exe

Files

New Project 1.exe
.exe windows:1 windows x86 arch:x86

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 25.8MB - Virtual size: 25.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ