newui[.]exe | Triage™

General

Target
newui.exe
Size 103KB
Sample260722-qa5n7afa49
SHA256 3d1cc3ae0f589a160aeb686cbfd9441fcb01f2e07c4f785e3caeae9b8b2deffb
MD5 1179c502d07285a7758a844706ba5638
SHA1 85984c089692715412ff4806b5e00d18d333bbfe
SHA512 ff649780df380add0aca0725eef734355a5edb141afdc7a08f79f34bec96c046fce8dbe0d63db3baa8d36e57dd47ec0d4ec3b4f1deccda2ddb8927eb3d3f0502
SSDEEP 3072:wzd35JVZPJnRQSLAtHsMBEX/NNh4S3Obr8:S5+
TLSH
T1ACA374013C4001FAEC77923C9B9D57C9D7ECBB08639496AFABCD505411719AA2DFAE23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
newui.exe

File Explorer

newui.exe

.exe 103KB

newui.exe

IMPHASH c4badf11c29f0c30d8ce21deb255bf14
SHA256 3d1cc3ae0f589a160aeb686cbfd9441fcb01f2e07c4f785e3caeae9b8b2deffb
MD5 1179c502d07285a7758a844706ba5638
SHA1 85984c089692715412ff4806b5e00d18d333bbfe
SHA512 ff649780df380add0aca0725eef734355a5edb141afdc7a08f79f34bec96c046fce8dbe0d63db3baa8d36e57dd47ec0d4ec3b4f1deccda2ddb8927eb3d3f0502
SSDEEP 3072:wzd35JVZPJnRQSLAtHsMBEX/NNh4S3Obr8:S5+
TLSH
T1ACA374013C4001FAEC77923C9B9D57C9D7ECBB08639496AFABCD505411719AA2DFAE23
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

85568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z

ws2_32

inet_addr

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __C_specific_handler __std_exception_destroy __current_exception __std_terminate memchr memcmp memcpy __current_exception_context __std_exception_copy memset memmove

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _cexit terminate _c_exit _register_onexit_function exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _initialize_onexit_table _errno _invalid_parameter_noinfo_noreturn _register_thread_local_exe_atexit_callback _exit

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW

Sharing