ParzPainter[.]exe | Triage™

General

Target
ParzPainter.exe
Size 153KB
Sample260720-csdrjact8l
SHA256 5ee6f70acdc3f8a9b7c40be0667a1f36badbc20ea9d5892aba9fd90df24c7610
MD5 7a921d7e9a79f0d09926d61fc2a13d97
SHA1 cf859d5a1d9903ac3895d03ff7cd54f9856265d6
SHA512 57b624ff69a204cc568a1badf7cb107c05967c284c90a324244a66af7c4605f52bedf2912770e5841831273bc60eab54b98dca08d493de3b5161931b40fc2c8a
SSDEEP 3072:bOJZM1xEghN6O2hAISbbKhn1s8KfqeGADQ:uZM1xESNQHSbKh1K
TLSH
T1D5E36D57B3E531F9E1A7823888910602E7B3B87607709B9F07E447766F236909D3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ParzPainter.exe

File Explorer

ParzPainter.exe

.exe 153KB

ParzPainter.exe

IMPHASH 882522e003efd29f96ed22d409919e27
SHA256 5ee6f70acdc3f8a9b7c40be0667a1f36badbc20ea9d5892aba9fd90df24c7610
MD5 7a921d7e9a79f0d09926d61fc2a13d97
SHA1 cf859d5a1d9903ac3895d03ff7cd54f9856265d6
SHA512 57b624ff69a204cc568a1badf7cb107c05967c284c90a324244a66af7c4605f52bedf2912770e5841831273bc60eab54b98dca08d493de3b5161931b40fc2c8a
SSDEEP 3072:bOJZM1xEghN6O2hAISbbKhn1s8KfqeGADQ:uZM1xESNQHSbKh1K
TLSH
T1D5E36D57B3E531F9E1A7823888910602E7B3B87607709B9F07E447766F236909D3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8092

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesW CloseHandle GetLastError WaitForSingleObject CreateRemoteThread OpenProcess VirtualAllocEx WriteProcessMemory GetModuleFileNameW GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Process32FirstW Process32NextW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadFile ReadConsoleW HeapSize HeapReAlloc CreateFileW RtlUnwind

Sharing