Holmium[.]exe | Triage™

General

Target
Holmium.exe
Size 126KB
Sample260724-13nw9agk21
SHA256 763b04a88559fd1ef98c45c528ea034a646f5a3109512d88ae86b2eae8b10388
MD5 c5bff96cabce5fdaad88d58dfe16ca96
SHA1 8607363137418ebe82c005d6f585f4a385be460d
SHA512 8280ad4e795b51c2c2ef281c214c74f36fae2f175662af761884d304803a4741a608d99cddbea4903dbc63604750c1cfd3794320bb44d4ce56a5a236ac1cb9b0
SSDEEP 3072:2z/euuBVs2wtfDCXJHrs6JfYjbI/O6YHSDJY4M:auBVyO66Yt
TLSH
T136C37C10F8D1C472E472593518B5DAB14E3DFD711F299EAB2384223E4E240D16E7AEBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Holmium.exe

File Explorer

Holmium.exe

.exe 126KB

Holmium.exe

IMPHASH ceec2f869e81717b143a0b0e329369c7
SHA256 763b04a88559fd1ef98c45c528ea034a646f5a3109512d88ae86b2eae8b10388
MD5 c5bff96cabce5fdaad88d58dfe16ca96
SHA1 8607363137418ebe82c005d6f585f4a385be460d
SHA512 8280ad4e795b51c2c2ef281c214c74f36fae2f175662af761884d304803a4741a608d99cddbea4903dbc63604750c1cfd3794320bb44d4ce56a5a236ac1cb9b0
SSDEEP 3072:2z/euuBVs2wtfDCXJHrs6JfYjbI/O6YHSDJY4M:auBVyO66Yt
TLSH
T136C37C10F8D1C472E472593518B5DAB14E3DFD711F299EAB2384223E4E240D16E7AEBB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14463

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\MSI\source\repos\Holmium\Release\Holmium.pdb

kernel32

HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW DecodePointer ExitProcess GetProcAddress CreateThread LoadLibraryW CloseHandle TerminateThread Sleep CreateFileW WriteFile GetProcessHeap GetStringTypeW GetFileType SetStdHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP HeapFree HeapAlloc WaitForSingleObject GetExitCodeProcess CreateProcessA GetFileAttributesExW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CompareStringW LCMapStringW RaiseException

user32

ReleaseDC InvalidateRect GetDesktopWindow GetSystemMetrics EnumChildWindows SendMessageTimeoutW GetDC MessageBoxW

gdi32

CreateSolidBrush BitBlt Pie CreateFontA SelectObject CreateDIBSection CreateCompatibleDC PatBlt StretchBlt PolyBezier DeleteDC SetTextColor TextOutA SetBkMode CreatePen Rectangle Ellipse SetStretchBltMode DeleteObject

winmm

waveOutOpen waveOutClose waveOutUnprepareHeader waveOutWrite waveOutPrepareHeader

Sharing