salinewin1[.]5-safety[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
salinewin1.5-safety.exe
Size 245KB
Sample260928-ymkhsasdpc
SHA256 bafd3d712a32b884001dccd7f6f77fd9aa515b254352310e20f67026364c7884
MD5 e69d64dfc3d809dc8dbdda9c367b0afc
SHA1 dc61951ccd463291bb2e2758fc8afebaa8ffadcc
SHA512 d5e644ab734168d5f42028a6196aba091a60b8536e0101e15254ecc154f564b495f4d66d948399cd4de42f19423cb500a8f8b90d59652fb31e68f1375e28def5
SSDEEP 3072:3WiJUpGuEy1AXy4e5II5CoTbLYiBZP5pHQpYR95WPNp/H:GBpduiPRZPPHQpY35WPNpf
TLSH
T127347D21B5C1C4F1F97945356836C9910E6AFC36AF501EAF3298332F0E751E2453AEAE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
salinewin1.5-safety.exe

File Explorer

salinewin1.5-safety.exe

.exe 245KB

salinewin1.5-safety.exe

IMPHASH 106168d1bd6a4669e663eb5e822d6613
SHA256 bafd3d712a32b884001dccd7f6f77fd9aa515b254352310e20f67026364c7884
MD5 e69d64dfc3d809dc8dbdda9c367b0afc
SHA1 dc61951ccd463291bb2e2758fc8afebaa8ffadcc
SHA512 d5e644ab734168d5f42028a6196aba091a60b8536e0101e15254ecc154f564b495f4d66d948399cd4de42f19423cb500a8f8b90d59652fb31e68f1375e28def5
SSDEEP 3072:3WiJUpGuEy1AXy4e5II5CoTbLYiBZP5pHQpYR95WPNp/H:GBpduiPRZPPHQpY35WPNpf
TLSH
T127347D21B5C1C4F1F97945356836C9910E6AFC36AF501EAF3298332F0E751E2453AEAE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12842

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\PC\source\repos\salinewin-safety\Release\salinewin-safety.pdb

kernel32

GetConsoleCP HeapReAlloc GetConsoleMode SetFilePointerEx WriteConsoleW DecodePointer CreateFileW CreateThread CloseHandle TerminateThread FlushFileBuffers Sleep HeapSize GetProcessHeap GetStringTypeW GetFileType SetStdHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP HeapFree HeapAlloc FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CompareStringW LCMapStringW RaiseException

user32

GetSystemMetrics GetCursorPos ReleaseDC SetCursorPos InvalidateRect LoadIconW GetDC DrawIcon

gdi32

CreateCompatibleBitmap SelectObject CreateDIBSection CreateCompatibleDC PolyBezier DeleteDC CreatePen Ellipse DeleteObject CreateSolidBrush BitBlt

winmm

waveOutPrepareHeader waveOutOpen waveOutClose waveOutUnprepareHeader waveOutWrite

msimg32

AlphaBlend