clpr11[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
clpr11.exe
Size 166KB
Sample260826-pp46jaygnc
SHA256 41c0b926d585a233471fd35953c36fca3d3cf7b83060bda5a41ffa6da8317b7a
MD5 1837d886fd3a1a07788f41a3d16416a1
SHA1 bd25114e87be36b5056d4ebba531cbea1058cb7b
SHA512 17f6826e45631ed667d50b676eb39d786a8d1c65d5eccad90c453059af9934cf5d71f583931f966208642484124b072bee46017dcffbdc8f19ecce4621e84285
SSDEEP 3072:Od6/4CsQSODs98mIOWgxwlIFaKAzhDEWxrGvNvHXrb15STd:OJCsDSs98JswWaKAuVR
TLSH
T1D1F37C4A73E510FDE1378239C9551905F772782607209BAF07A04BBA9F272E1AD3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
clpr11.exe

File Explorer

clpr11.exe

.exe 166KB

clpr11.exe

IMPHASH 30750ba96e4675bed41fdebb145fc411
SHA256 41c0b926d585a233471fd35953c36fca3d3cf7b83060bda5a41ffa6da8317b7a
MD5 1837d886fd3a1a07788f41a3d16416a1
SHA1 bd25114e87be36b5056d4ebba531cbea1058cb7b
SHA512 17f6826e45631ed667d50b676eb39d786a8d1c65d5eccad90c453059af9934cf5d71f583931f966208642484124b072bee46017dcffbdc8f19ecce4621e84285
SSDEEP 3072:Od6/4CsQSODs98mIOWgxwlIFaKAzhDEWxrGvNvHXrb15STd:OJCsDSs98JswWaKAuVR
TLSH
T1D1F37C4A73E510FDE1378239C9551905F772782607209BAF07A04BBA9F272E1AD3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29812

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

CloseClipboard GetClipboardSequenceNumber SetClipboardData GetClipboardData EmptyClipboard OpenClipboard

advapi32

RegOpenKeyExA RegCloseKey GetUserNameA RegSetValueExA

winhttp

WinHttpCloseHandle WinHttpOpen WinHttpQueryDataAvailable WinHttpReadData WinHttpSetTimeouts WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpConnect

shell32

SHGetFolderPathA

kernel32

GetConsoleOutputCP CreateFileW WriteConsoleW GetConsoleMode FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetStringTypeW SetStdHandle GetProcessHeap SetFileAttributesA CloseHandle GetLastError CreateMutexA Sleep GetCurrentProcessId CreateThread GetTickCount GetModuleFileNameA GlobalAlloc GlobalUnlock GlobalLock CopyFileA GetComputerNameA MultiByteToWideChar WideCharToMultiByte RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW