chardetect[.]exe | Triage™

General

Target
chardetect.exe
Size 94KB
Sample260821-wp4y4avdph
SHA256 aa350ec560e75d0afdabb452cbc5fd7e49d11fec9ef604e7cb7493fd5473c98d
MD5 eadcd8a0d614ac0907e5296a3fc90fda
SHA1 d6723bff40bb71465c716bb13e5a5d17e0062d18
SHA512 ad93f94392faf406902d5bf56013cef56954ba6f710d2fa0381e3647e8c904ea16643f612f58af3e3d687bafc31db248292c6c6b0c920ded7efdfb7480bd7f62
SSDEEP 1536:WRCgEoP+G7f5G+OISw7ehlGHf5KOdT+m3jM97/TuF0SqfuYFfHYToxsu+:WRCg9nxGjBlGrdTd3wL2qfuCfHYToqu+
TLSH
T1C7938D217390D076F06614306D6AC2B24ABE7C3285B8894777D47B3E1F713C1AEBAB56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
chardetect.exe

File Explorer

chardetect.exe

.exe 94KB

chardetect.exe

IMPHASH 0a6e6a1e3cba00906d9b8fea0b706cf9
SHA256 aa350ec560e75d0afdabb452cbc5fd7e49d11fec9ef604e7cb7493fd5473c98d
MD5 eadcd8a0d614ac0907e5296a3fc90fda
SHA1 d6723bff40bb71465c716bb13e5a5d17e0062d18
SHA512 ad93f94392faf406902d5bf56013cef56954ba6f710d2fa0381e3647e8c904ea16643f612f58af3e3d687bafc31db248292c6c6b0c920ded7efdfb7480bd7f62
SSDEEP 1536:WRCgEoP+G7f5G+OISw7ehlGHf5KOdT+m3jM97/TuF0SqfuYFfHYToxsu+:WRCg9nxGjBlGrdTd3wL2qfuCfHYToqu+
TLSH
T1C7938D217390D076F06614306D6AC2B24ABE7C3285B8894777D47B3E1F713C1AEBAB56
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12803

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Vinay\Projects\simple_launcher\dist\t32.pdb

kernel32

ExitProcess GetCommandLineW SearchPathW SetInformationJobObject CreateProcessW GetCurrentProcess WaitForSingleObject GenerateConsoleCtrlEvent AssignProcessToJobObject FormatMessageW GetExitCodeProcess GetModuleFileNameW QueryInformationJobObject MultiByteToWideChar CreateJobObjectA GetStdHandle GetLastError SetConsoleCtrlHandler DuplicateHandle CloseHandle HeapSize GetProcessHeap SetEndOfFile SetEnvironmentVariableW HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetStringTypeW GetCommandLineA HeapSetInformation TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount EncodePointer DecodePointer RtlUnwind HeapCreate GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress WriteFile SetHandleCount GetFileType GetStartupInfoW DeleteCriticalSection Sleep LCMapStringW ReadFile SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA WideCharToMultiByte QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CreateFileW LoadLibraryW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle IsProcessorFeaturePresent CompareStringW WriteConsoleW

shlwapi

StrStrIW PathRemoveFileSpecW PathCombineW

Sharing