vip[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
vip.exe
Size 67KB
Sample260830-1lyp5a1alg
SHA256 e4adf86d9c0f1e402afe3f701b267c2e8d6b89ac29439b8a0bc36aead59f64de
MD5 5071f7eded31b0381de4723217354491
SHA1 24254bd3f4652fd750c0b10aae6d800bcdfa639e
SHA512 1f28b56d53b2cb269cabd19274f7ac295d6b167748123ecb945712a8b0e54b42227028f22995c27e6fa56857810a9173b7dc3c7458b073d14e7781ed6595a323
SSDEEP 1536:Qq/DN8JfMfAbAlp1xV8XYQTIHDJzqPAPUT0:Qq/DjAUlxuoQEjpPUI
TLSH
T128633A2AA3A103F8D429C17AC6F25503D331B80D23716BCF479095F98F175E9AF7A986
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vip.exe

File Explorer

vip.exe

.exe 67KB

vip.exe

IMPHASH 2459a7b4d9778a53697e1860ce8e24b3
SHA256 e4adf86d9c0f1e402afe3f701b267c2e8d6b89ac29439b8a0bc36aead59f64de
MD5 5071f7eded31b0381de4723217354491
SHA1 24254bd3f4652fd750c0b10aae6d800bcdfa639e
SHA512 1f28b56d53b2cb269cabd19274f7ac295d6b167748123ecb945712a8b0e54b42227028f22995c27e6fa56857810a9173b7dc3c7458b073d14e7781ed6595a323
SSDEEP 1536:Qq/DN8JfMfAbAlp1xV8XYQTIHDJzqPAPUT0:Qq/DjAUlxuoQEjpPUI
TLSH
T128633A2AA3A103F8D429C17AC6F25503D331B80D23716BCF479095F98F175E9AF7A986
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

48288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\99\source\repos\crystal\x64\Release\vip.pdb

kernel32

GetCurrentProcessId SetPriorityClass GetCurrentThreadId QueryPerformanceCounter GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead GetPrivateProfileStringA GetModuleHandleW WritePrivateProfileStringA GetCurrentThread Sleep InitializeCriticalSection LeaveCriticalSection SetThreadPriority GetCurrentProcess EnterCriticalSection SetUnhandledExceptionFilter

user32

PostMessageW DispatchMessageA DestroyWindow GetDC keybd_event SetWindowRgn ScreenToClient GetMessageA ShowWindow GetAsyncKeyState SetTimer MapVirtualKeyA RegisterHotKey RegisterClassA UnhookWindowsHookEx DefWindowProcA UnregisterHotKey CallNextHookEx CreateWindowExA SetLayeredWindowAttributes TranslateMessage LoadCursorW SetWindowsHookExW GetClientRect KillTimer EndPaint BeginPaint ReleaseDC PostQuitMessage InvalidateRect SetForegroundWindow SendInput

gdi32

DeleteObject SetTextColor DeleteDC CreateRectRgn CreateRoundRectRgn GetStockObject SetPixel CreateCompatibleDC GetTextExtentPoint32A SelectObject CreateFontA CreateSolidBrush CreateCompatibleBitmap BitBlt SetBkMode LineTo CreatePen SelectClipRgn MoveToEx RoundRect TextOutA

shell32

ShellExecuteA

msvcp140

?_Xlength_error@std@@YAXPEBD@Z _Cnd_do_broadcast_at_thread_exit _Thrd_id _Thrd_join ?_Xout_of_range@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Throw_Cpp_error@std@@YAXH@Z

winmm

timeEndPeriod timeBeginPeriod

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler _CxxThrowException __current_exception __current_exception_context __std_exception_destroy memcmp memmove memcpy __std_exception_copy

api-ms-win-crt-utility-l1-1-0

srand rand

api-ms-win-crt-string-l1-1-0

toupper strlen

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _get_narrow_winmain_command_line _initterm _initterm_e exit _exit _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _errno terminate _beginthreadex _set_app_type

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s __p__commode _set_fmode

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode free malloc

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale