level1easy[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
level1easy.exe
Size 19KB
Sample260722-rh4yasff59
SHA256 2a7fc7448560b95eef9c7f95ceab51a7c155d92945f0848bead38f5ea6e83ec9
MD5 ee43bb935bdcd442363ca5f0d2372137
SHA1 3d5748196df03a0e3cb4df63003c474057bc9889
SHA512 94abc770f053807dfb9383ef5d90f3c4ec3fd143877b40d8eb10d7267666e78040151c4e0dffc8a2e08089772615507c2309e0ee850ee309e9c99653c397c3d5
SSDEEP 384:wHJF40VS+eI40YTZEeWKczmoZK6W3JPi+:440k+eI44eWKsW35i+
TLSH
T143925C47778748EAE63692BD85E34A20E2B3F5114B2267CF4393915D0FAA3C09C37D86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
level1easy.exe

File Explorer

level1easy.exe

.exe 19KB

level1easy.exe

IMPHASH 94ab72a6b85259cc0e7fb9396c396f7b
SHA256 2a7fc7448560b95eef9c7f95ceab51a7c155d92945f0848bead38f5ea6e83ec9
MD5 ee43bb935bdcd442363ca5f0d2372137
SHA1 3d5748196df03a0e3cb4df63003c474057bc9889
SHA512 94abc770f053807dfb9383ef5d90f3c4ec3fd143877b40d8eb10d7267666e78040151c4e0dffc8a2e08089772615507c2309e0ee850ee309e9c99653c397c3d5
SSDEEP 384:wHJF40VS+eI40YTZEeWKczmoZK6W3JPi+:440k+eI44eWKsW35i+
TLSH
T143925C47778748EAE63692BD85E34A20E2B3F5114B2267CF4393915D0FAA3C09C37D86
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8016

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\knze2\source\repos\crackmetest\x64\Release\crackmetest.pdb

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?id@?$ctype@D@std@@2V0locale@2@A ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?good@ios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Xbad_alloc@std@@YAXXZ ?_Id_cnt@id@locale@std@@0HA ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ??0_Lockit@std@@QEAA@H@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ??1_Lockit@std@@QEAA@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __std_exception_destroy __std_exception_copy __std_terminate __C_specific_handler memcpy memcmp _CxxThrowException __current_exception

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode

api-ms-win-crt-runtime-l1-1-0

__p___argc _seh_filter_exe _initialize_onexit_table _register_thread_local_exe_atexit_callback _crt_atexit terminate _c_exit _set_app_type __p___argv _cexit _register_onexit_function _configure_narrow_argv _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

GetModuleHandleW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter

api-ms-win-crt-string-l1-1-0

strlen