Mobileverif[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Mobileverif.exe
Size 183KB
Sample260910-vh5flssfqe
SHA256 1ec59250170afad85e9e5bbd83851db1dee53e2331617af8e1268dbb408dc578
MD5 db085e84480cbe8e38b2b9c0213d0c3e
SHA1 3975e048026835b2063b7df48297adafcdf36cac
SHA512 85807ffbfd639060b9731badd08337a94b31f7832f65aa0e398991d37fbce402839b740bd082c5a7785d8b01f56f7d45ea221f27b20a3044690d8adb881e7da0
SSDEEP 3072:PKWDN5Ahrj2+8uhaC8QTO7J6CJeso2MGWFexOHl4Hwibn955HS48nmR3Hb5A:PhHAlqYhaC8QT1CesoSa4Hwibdz8na3V
TLSH
T199046D2EFA5501BAD157C578CA538A03F7B378490361A7DB57D05FB90F23AE0AA3E910
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mobileverif.exe

File Explorer

Mobileverif.exe

.exe 183KB

Mobileverif.exe

IMPHASH 54b2fe6a2983d7656085465bd927bd6e
SHA256 1ec59250170afad85e9e5bbd83851db1dee53e2331617af8e1268dbb408dc578
MD5 db085e84480cbe8e38b2b9c0213d0c3e
SHA1 3975e048026835b2063b7df48297adafcdf36cac
SHA512 85807ffbfd639060b9731badd08337a94b31f7832f65aa0e398991d37fbce402839b740bd082c5a7785d8b01f56f7d45ea221f27b20a3044690d8adb881e7da0
SSDEEP 3072:PKWDN5Ahrj2+8uhaC8QTO7J6CJeso2MGWFexOHl4Hwibn955HS48nmR3Hb5A:PhHAlqYhaC8QT1CesoSa4Hwibdz8na3V
TLSH
T199046D2EFA5501BAD157C578CA538A03F7B378490361A7DB57D05FB90F23AE0AA3E910
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

126080

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Administrator\source\repos\Mobileverif\x64\Release\Mobileverif.pdb

kernel32

ReadFile GetFileSizeEx GetEnvironmentVariableA MultiByteToWideChar Sleep GetLastError CreateFileA CloseHandle SetFilePointerEx GetTickCount AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead ReleaseSRWLockExclusive

msvcp140

?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Id_cnt@id@locale@std@@0HA ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?_Xbad_function_call@std@@YAXXZ ?id@?$ctype@D@std@@2V0locale@2@A ?_Xlength_error@std@@YAXPEBD@Z ?id@?$collate@D@std@@2V0locale@2@A _Strcoll _Cnd_do_broadcast_at_thread_exit _Thrd_detach ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?good@ios_base@std@@QEBA_NXZ ??Bios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?tolower@?$ctype@D@std@@QEBADD@Z ??1facet@locale@std@@MEAA@XZ ??0facet@locale@std@@IEAA@_K@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z __crtLCMapStringA ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Xbad_alloc@std@@YAXXZ _Strxfrm ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Throw_Cpp_error@std@@YAXH@Z ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

wininet

HttpSendRequestA InternetCloseHandle InternetOpenA HttpAddRequestHeadersA InternetSetOptionA HttpOpenRequestA InternetQueryOptionA HttpQueryInfoA InternetConnectA InternetReadFile

winhttp

WinHttpOpen WinHttpQueryHeaders WinHttpReadData WinHttpOpenRequest WinHttpSetOption WinHttpCloseHandle WinHttpSendRequest WinHttpSetTimeouts WinHttpConnect WinHttpReceiveResponse WinHttpQueryDataAvailable

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __current_exception _CxxThrowException __C_specific_handler memset memmove memcmp memcpy __RTtypeid strchr __std_exception_destroy __std_exception_copy __std_type_info_compare __std_terminate

api-ms-win-crt-heap-l1-1-0

_callnewh free _set_new_mode realloc malloc

api-ms-win-crt-convert-l1-1-0

strtod atoi strtoll strtoull

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe exit _exit _cexit __p___argc _initterm _register_thread_local_exe_atexit_callback _crt_atexit _beginthreadex _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _get_initial_narrow_environment _c_exit _set_app_type terminate _errno _initterm_e __p___argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode __stdio_common_vsprintf_s __stdio_common_vsprintf

api-ms-win-crt-locale-l1-1-0

___lc_collate_cp_func _configthreadlocale ___lc_locale_name_func localeconv

api-ms-win-crt-string-l1-1-0

_stricmp strlen

api-ms-win-crt-math-l1-1-0

__setusermatherr