ineprem[.]exe | Triage™

General

Target
ineprem.exe
Size 12KB
Sample260930-xp45jagb39
SHA256 17333c51cefe68edab86e7dce5de26b5869adf2c1e86f1c7b33209ac6ee088d4
MD5 e30a1cfccf4fcdf22b406ef6708890b5
SHA1 56756609bd6b59afc0207798e8b5a2897c2fb226
SHA512 d2a891264d29ba3d7bc1ae870e6b3143d80878b56209bfa76c73864009bda8087191c7d7a62ab4e48fb621930cf28f8f4af9c6108717e9830a515741e7b969b3
SSDEEP 192:/g316frGBgNjeMHUUV92ZNEbYMB/h6sQ5tfGocu:o8iBgtrL2ZN4V/h6sT
TLSH
T16342181BBF924CEAC1398277C0632D26F5B7BF344772528F476461291EA22D2BD25681
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ineprem.exe

File Explorer

ineprem.exe

.exe 12KB

ineprem.exe

IMPHASH ffc312f524462e9b52b0b7ad7a5a8c75
SHA256 17333c51cefe68edab86e7dce5de26b5869adf2c1e86f1c7b33209ac6ee088d4
MD5 e30a1cfccf4fcdf22b406ef6708890b5
SHA1 56756609bd6b59afc0207798e8b5a2897c2fb226
SHA512 d2a891264d29ba3d7bc1ae870e6b3143d80878b56209bfa76c73864009bda8087191c7d7a62ab4e48fb621930cf28f8f4af9c6108717e9830a515741e7b969b3
SSDEEP 192:/g316frGBgNjeMHUUV92ZNEbYMB/h6sQ5tfGocu:o8iBgtrL2ZN4V/h6sT
TLSH
T16342181BBF924CEAC1398277C0632D26F5B7BF344772528F476461291EA22D2BD25681
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Efah\Desktop\Left4Dead2-Autobhop-main\bin\x64\Release\l4d2-autobhop.pdb

kernel32

OpenProcess CreateToolhelp32Snapshot Sleep CloseHandle ExitProcess ReadProcessMemory GetConsoleWindow Module32Next Module32First RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId RtlCaptureContext GetSystemTimeAsFileTime InitializeSListHead GetModuleHandleW IsDebuggerPresent

user32

FindWindowA SendMessageA GetAsyncKeyState IsWindow GetWindowThreadProcessId ShowWindow

vcruntime140

__current_exception_context memset __C_specific_handler __current_exception memcpy

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vfprintf puts __acrt_iob_func __p__commode fputs

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _cexit exit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit __p___argc __p___argv _exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv terminate _set_app_type _seh_filter_exe

api-ms-win-crt-multibyte-l1-1-0

_mbscmp

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing