TestApp[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
TestApp.exe
Size 45KB
Sample260705-tfexhahs9p
SHA256 f33c9d3a543c104c514ebc832cd73413fdbeadf07a537601f520594edfd1d413
MD5 191352f11f7d97d9f45d7d94277cbab8
SHA1 5d35546644c724e67a11cc87338820fc295a4f09
SHA512 7b613f36475fc86363b11442218ba49334af0e18ec8a302b5d97f747d50623ffc427fd7855ffd1b5e075b1162d6718903c8d49956adf401a1e818f6d427a0277
SSDEEP 768:Trk0M+ptQKbCKDbTSF93z6Tlb95/O2vfwOMCFwF4MH7rj:ToWPQ8DSz6Tlb95/OkoOMcwW4rj
TLSH
T14623E826DD2A906FD359CDB8DA430D05DE22BCC68BE179CF67401CE60965BD89B3F602
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TestApp.exe

File Explorer

TestApp.exe

.exe 45KB

TestApp.exe

IMPHASH 7a4776ea2de1a784e5fb4afc0ac41d49
SHA256 f33c9d3a543c104c514ebc832cd73413fdbeadf07a537601f520594edfd1d413
MD5 191352f11f7d97d9f45d7d94277cbab8
SHA1 5d35546644c724e67a11cc87338820fc295a4f09
SHA512 7b613f36475fc86363b11442218ba49334af0e18ec8a302b5d97f747d50623ffc427fd7855ffd1b5e075b1162d6718903c8d49956adf401a1e818f6d427a0277
SSDEEP 768:Trk0M+ptQKbCKDbTSF93z6Tlb95/O2vfwOMCFwF4MH7rj:ToWPQ8DSz6Tlb95/OkoOMcwW4rj
TLSH
T14623E826DD2A906FD359CDB8DA430D05DE22BCC68BE179CF67401CE60965BD89B3F602
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Vd201\source\repos\TestApp\x64\Release\TestApp.pdb

kernel32

ExitProcess GetModuleHandleW GlobalUnlock InitializeSListHead GlobalLock QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime MoveFileExW CloseHandle CreateFileA Sleep GetModuleFileNameW SetUnhandledExceptionFilter WriteFile

user32

SetWindowsHookExW MapVirtualKeyW GetDC CallNextHookEx GetSystemMetrics GetKeyNameTextA OpenClipboard CloseClipboard GetClipboardData UnhookWindowsHookEx ReleaseDC

gdi32

DeleteObject CreateCompatibleDC SelectObject CreateCompatibleBitmap BitBlt DeleteDC

ole32

GetHGlobalFromStream CreateStreamOnHGlobal

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?good@ios_base@std@@QEBA_NXZ ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

winhttp

WinHttpReadData WinHttpReceiveResponse WinHttpCloseHandle WinHttpSendRequest WinHttpConnect WinHttpQueryDataAvailable WinHttpOpenRequest WinHttpOpen

gdiplus

GdipFree GdiplusStartup GdiplusShutdown GdipGetImageEncoders GdipCloneImage GdipAlloc GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipGetImageEncodersSize GdipSaveImageToStream

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy __std_exception_destroy __C_specific_handler _CxxThrowException memmove memcmp memcpy __std_terminate __current_exception_context __current_exception

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode _callnewh free

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argv __p___argc terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

strlen