clp2[.]exe | Triage™

General

Target
clp2.exe
Size 2.5MB
Sample260608-pgkf6ads2p
SHA256 c8ade7f7a8f1684e4ce322ebd6c3e5a1a4f1e7b0fc36a659be36f63fbfc52a6b
MD5 d1fe4ef024293edd4274be90c7da29a3
SHA1 66d4855739860c15625f5a82534cd850b93e2193
SHA512 847ae6a30311db71d92223480091332327c205c3d3ea293cec9f620fdebfe37d7cc431c83a52bb57802e851b85270369d074caf4ee5f842bf9b1493776f2d6d8
SSDEEP 24576:+Lksx0ml5c6yiHCPc/5vXL0pCC0gePvqC:kn0mZyHcWC4eN
TLSH
T1FFC5E28D775D41ACC56244B210F10A92A7B9DB16A3E85E071BC6CC788E120DDBBBDBF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
clp2.exe

File Explorer

clp2.exe

.exe 2.5MB

clp2.exe

IMPHASH 19945200808424dd61e24be83a91ce50
SHA256 c8ade7f7a8f1684e4ce322ebd6c3e5a1a4f1e7b0fc36a659be36f63fbfc52a6b
MD5 d1fe4ef024293edd4274be90c7da29a3
SHA1 66d4855739860c15625f5a82534cd850b93e2193
SHA512 847ae6a30311db71d92223480091332327c205c3d3ea293cec9f620fdebfe37d7cc431c83a52bb57802e851b85270369d074caf4ee5f842bf9b1493776f2d6d8
SSDEEP 24576:+Lksx0ml5c6yiHCPc/5vXL0pCC0gePvqC:kn0mZyHcWC4eN
TLSH
T1FFC5E28D775D41ACC56244B210F10A92A7B9DB16A3E85E071BC6CC788E120DDBBBDBF4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5723

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegOpenKeyExW OpenProcessToken RegSetValueExW RegCloseKey GetTokenInformation

user32

wsprintfW

shell32

ShellExecuteW

kernel32

WriteConsoleW SetFilePointerEx GetCurrentProcess lstrlenW WriteFile GetModuleFileNameW GetEnvironmentVariableW WaitForSingleObject CreateFileW SetFileAttributesW lstrcatW DeleteFileW CloseHandle GetCurrentDirectoryW CreateProcessW CopyFileW lstrcpyW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

Sharing