artifact[.]com | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
artifact.com
Size 36.1MB
Sample260827-e2fctsdl6s
SHA256 731f6ef64091cb5ac8a3b85d4e86dbdc9009e4096a06fec3cef1c08f32f6652d
MD5 c23a886b57c97a572b8db27e1948c72e
SHA1 f6e4326a763bbe144e9836a5bad4d9593f8f8a4f
SHA512 090f4c131a0886cdc3e7849b310195fb9b02681c8884e743575a0d00525ff5b7f8c4f9c088033fb58ce730e4c97320697465051e74f4cb3b323a27ee6cfb3636
SSDEEP 786432:q9d+fphVCrdeOcPD8HROsA8SCnC7gpQxnGJp+TN:TphVCrddHxA8SCnAg6xnGJp+
TLSH
T11C8723D528E042ECC767C635D28B2BEEE2853856AE76D41F7FC540022631D86DDD2E3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
artifact.com

File Explorer

artifact.com

.exe 36.1MB

artifact.com

IMPHASH 3d49d085e89055759afd73c1de557557
SHA256 731f6ef64091cb5ac8a3b85d4e86dbdc9009e4096a06fec3cef1c08f32f6652d
MD5 c23a886b57c97a572b8db27e1948c72e
SHA1 f6e4326a763bbe144e9836a5bad4d9593f8f8a4f
SHA512 090f4c131a0886cdc3e7849b310195fb9b02681c8884e743575a0d00525ff5b7f8c4f9c088033fb58ce730e4c97320697465051e74f4cb3b323a27ee6cfb3636
SSDEEP 786432:q9d+fphVCrdeOcPD8HROsA8SCnC7gpQxnGJp+TN:TphVCrddHxA8SCnAg6xnGJp+
TLSH
T11C8723D528E042ECC767C635D28B2BEEE2853856AE76D41F7FC540022631D86DDD2E3A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

68048503

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wininet

InternetCloseHandle

crypt32

CertOpenStore

advapi32

ChangeServiceConfigA

user32

GetWindowThreadProcessId

bcrypt

BCryptGenRandom

kernel32

AreFileApisANSI

gdi32

SelectObject

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

msvcp140

_Mtx_trylock

ntdll

NtCreateFile

netapi32

NetApiBufferFree

vcruntime140

strchr

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

signal

api-ms-win-crt-string-l1-1-0

isprint

api-ms-win-crt-convert-l1-1-0

wcstoul

api-ms-win-crt-filesystem-l1-1-0

_wrename

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-math-l1-1-0

log

api-ms-win-crt-conio-l1-1-0

_getch

ws2_32

WSACleanup

wintrust

WinVerifyTrust

tbs

Tbsi_GetDeviceInfo

setupapi

SetupDiSetClassInstallParamsW

cfgmgr32

CM_Set_DevNode_PropertyW

Name

.text

Size

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

905KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eac0

Size

Virtual Size

27.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.eac1

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eac2

Size

36.1MB

Virtual Size

36.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

artifact.com

wininet

crypt32

advapi32

user32

bcrypt

kernel32

gdi32

shell32

ole32

msvcp140

ntdll

netapi32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-conio-l1-1-0

ws2_32

wintrust

tbs

setupapi

cfgmgr32

generic