project[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
project.exe
Size 5.1MB
Sample260809-jrmflsbp9w
SHA256 e3db6cf292818425776c53766d97c9d219bad800fcb1b34c6f4184a7613bca0a
MD5 392e67ae9065f82e120b309d30300101
SHA1 f097a7190f9bfb60a1fdd36d151bb9dee3720336
SHA512 cdc7b1b82f37ded119a1c2c3e07a414c964dd3bf49658e2b4705fbf868f6fd7d2ac3d42a1996ec4745657300b7c567023078a1248ee361768c0e5383753c8ad3
SSDEEP 49152:73GEZclVbqB4/f+SPSj9UZn6yWN23PQHhJT05ARhAdbyXwV:X9lyWN23YHnoGkbww
TLSH
T1FC364C1576EA01E5D1BAC039D903D767CA30704A173C52FBA39489C56FB13E8ABBCB52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
project.exe

File Explorer

project.exe

.exe 5.1MB

project.exe

IMPHASH 315e3b76cfa1136011897a61d92e85a2
SHA256 e3db6cf292818425776c53766d97c9d219bad800fcb1b34c6f4184a7613bca0a
MD5 392e67ae9065f82e120b309d30300101
SHA1 f097a7190f9bfb60a1fdd36d151bb9dee3720336
SHA512 cdc7b1b82f37ded119a1c2c3e07a414c964dd3bf49658e2b4705fbf868f6fd7d2ac3d42a1996ec4745657300b7c567023078a1248ee361768c0e5383753c8ad3
SSDEEP 49152:73GEZclVbqB4/f+SPSj9UZn6yWN23PQHhJT05ARhAdbyXwV:X9lyWN23YHnoGkbww
TLSH
T1FC364C1576EA01E5D1BAC039D903D767CA30704A173C52FBA39489C56FB13E8ABBCB52
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

791531

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Vyron\Downloads\project\project\build\Debug\project.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

ole32

CoInitializeSecurity CoInitializeEx CoSetProxyBlanket CoCreateInstance CoUninitialize

oleaut32

CreateErrorInfo SetErrorInfo VariantChangeType VariantClear VariantInit SysFreeString SysAllocString GetErrorInfo

kernel32

GetTempPathW CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleHandleW LoadResource LockResource SizeofResource FindResourceW DeviceIoControl GlobalAlloc GlobalUnlock GlobalLock GetCurrentProcessId MultiByteToWideChar VerSetConditionMask QueryPerformanceCounter GetFileAttributesW FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA GetLocaleInfoA IsDBCSLeadByte LocalFree GetSystemTimeAsFileTime InitializeSListHead GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WriteFile CreateFileW CreateDirectoryW WideCharToMultiByte QueryPerformanceFrequency HeapAlloc HeapFree GetProcessHeap VirtualQuery GlobalFree GetStartupInfoW RaiseException IsDebuggerPresent WakeAllConditionVariable SleepConditionVariableSRW

user32

LoadCursorW ScreenToClient ClientToScreen SetCursor SetCursorPos MonitorFromWindow ReleaseDC GetDC GetForegroundWindow IsWindowUnicode GetMessageExtraInfo SetProcessDPIAware GetClientRect TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetCursorPos GetWindowRect ValidateRect SetWindowRgn EndPaint BeginPaint UpdateWindow KillTimer SetTimer ReleaseCapture GetKeyState SetCapture TranslateMessage DispatchMessageW PeekMessageW SendMessageW GetCapture DefWindowProcW PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW DestroyWindow ShowWindow SetWindowPos

gdi32

DeleteObject GetDeviceCaps CreateRectRgn CreateRoundRectRgn

advapi32

DeleteService StartServiceW CreateServiceW CloseServiceHandle QueryServiceStatusEx OpenServiceW OpenSCManagerW

shell32

ShellExecuteW

dwmapi

DwmExtendFrameIntoClientArea DwmEnableBlurBehindWindow DwmGetColorizationColor DwmIsCompositionEnabled

msvcp140d

??1_Lockit@std@@QEAA@XZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ??0_Lockit@std@@QEAA@H@Z _Thrd_detach _Cnd_do_broadcast_at_thread_exit ?_Throw_Cpp_error@std@@YAXH@Z

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

vcruntime140d

__vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_LoadLibraryExW __current_exception_context __current_exception __C_specific_handler_noexcept __C_specific_handler strchr memchr memmove memcmp _CxxThrowException __std_exception_destroy __std_exception_copy memset memcpy __std_type_info_destroy_list

vcruntime140_1d

__CxxFrameHandler4

ucrtbased

_beginthreadex __acrt_iob_func _wfopen fflush fwrite __stdio_common_vfprintf __stdio_common_vsscanf qsort fabs ceilf cosf fmodf sqrtf acosf sinf atof log pow atan2f logf _CrtDbgReportW _callnewh _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _crt_at_quick_exit _cexit wcslen _set_app_type __setusermatherr _get_narrow_winmain_command_line _initterm _initterm_e exit _exit _set_fmode _c_exit _register_thread_local_exe_atexit_callback _configthreadlocale _set_new_mode __p__commode strcpy_s strcat_s __stdio_common_vsprintf_s _free_dbg _wmakepath_s _wsplitpath_s wcscpy_s feof fclose fopen_s _wassert strtol _lrotl abs realloc malloc free strncmp strcmp strncpy strlen _CrtDbgReport _invoke_watson powf ldexp __stdio_common_vsprintf ungetc terminate ftell fseek fread fgetc _seh_filter_exe ferror

Name

.textbss

Size

Virtual Size

757KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

762KB

Virtual Size

762KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

764KB

Virtual Size

792KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

822B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

project.exe

d3d11

d3dcompiler_47

ole32

oleaut32

kernel32

user32

gdi32

advapi32

shell32

dwmapi

msvcp140d

imm32

vcruntime140d

vcruntime140_1d

ucrtbased

generic