WindowsProject1[.]exe

General

Target
WindowsProject1.exe
Size 114KB
Sample260707-1rt9wsfx3k
SHA256 a24fefabc5af611b562a50379144d97205416c0ef3d95b666e8b166f84f96110
MD5 8686c4ee660b4acc1e58310854e783ac
SHA1 cbb95be41e57da4d3fc1be6409824a4a097d4b1d
SHA512 bb84e9259f5af76df0505bb7aa875f7e77df0871d74915d44f2c5de562dc576a53d858068f8ed34cfdba59aab49c43e9fdfe6f058ccb298c4ced46cc334f967a
SSDEEP 3072:4Wak63aMD0fOtbx285tKL07SCwCDrGhF6FROeM32dGAV:/ak6rqMPtktFmZDQPAV
TLSH
T11AB34C01F8D1D032E6BA0C3289799E698D3DEC614B946DD7B7840DFA0D34ED1A73A917
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsProject1.exe

File Explorer

WindowsProject1.exe

.exe 114KB

WindowsProject1.exe

IMPHASH 81847e439dbb3e85670fd4942c1f16aa
SHA256 a24fefabc5af611b562a50379144d97205416c0ef3d95b666e8b166f84f96110
MD5 8686c4ee660b4acc1e58310854e783ac
SHA1 cbb95be41e57da4d3fc1be6409824a4a097d4b1d
SHA512 bb84e9259f5af76df0505bb7aa875f7e77df0871d74915d44f2c5de562dc576a53d858068f8ed34cfdba59aab49c43e9fdfe6f058ccb298c4ced46cc334f967a
SSDEEP 3072:4Wak63aMD0fOtbx285tKL07SCwCDrGhF6FROeM32dGAV:/ak6rqMPtktFmZDQPAV
TLSH
T11AB34C01F8D1D032E6BA0C3289799E698D3DEC614B946DD7B7840DFA0D34ED1A73A917
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

20720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AllocateAndInitializeSid CheckTokenMembership FreeSid RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

shell32

ShellExecuteA

kernel32

WriteConsoleW CreateFileW GetEnvironmentVariableA GetFileAttributesA SetFileAttributesA CloseHandle SetErrorMode WaitForSingleObject CreateProcessA CreateProcessW GetModuleFileNameA CopyFileA IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetStdHandle WriteFile GetModuleFileNameW IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx DecodePointer

Sharing