slinky[.]exe | Triage™

General

Target
slinky.exe
Size 6.0MB
Sample261015-3mjnpsef93
SHA256 dc993c424f9ccad6524cc8244e87193cb96f974bdf1648a30cecf2158bfa5b8f
MD5 0a82d454a73653349b7e80ffdcd74a51
SHA1 31960d4022fd5fd8581c25c140e98c2fbfdd2c1b
SHA512 a82923ef7f3e6c80ecd20d4e86ecc762ae7357182852bd11d3893b32ac975fabbaca75450627a3c4d2764e4f48abaef8dc75ca692c1fa577197f18f9dd2c9e1b
SSDEEP 98304:EcKLIyVaMgU+2VjDY26Z8H/n/5huIZzvdz1+I26Zo6/U/5hvX6z1ziaO+I26Zo6B:EcKLRVaMgURNFH//qIZzVY16/0TX6z1r
TLSH
T1DF5612566EEC6C79D4474532C0308042EB27F4D84586D90F6679029A4DEEFAF9F3ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
slinky.exe

File Explorer

slinky.exe

.exe 6.0MB

slinky.exe

IMPHASH ddd5c1f605dcafc7de15cf85b8efa828
SHA256 dc993c424f9ccad6524cc8244e87193cb96f974bdf1648a30cecf2158bfa5b8f
MD5 0a82d454a73653349b7e80ffdcd74a51
SHA1 31960d4022fd5fd8581c25c140e98c2fbfdd2c1b
SHA512 a82923ef7f3e6c80ecd20d4e86ecc762ae7357182852bd11d3893b32ac975fabbaca75450627a3c4d2764e4f48abaef8dc75ca692c1fa577197f18f9dd2c9e1b
SSDEEP 98304:EcKLIyVaMgU+2VjDY26Z8H/n/5huIZzvdz1+I26Zo6/U/5hvX6z1ziaO+I26Zo6B:EcKLRVaMgURNFH//qIZzVY16/0TX6z1r
TLSH
T1DF5612566EEC6C79D4474532C0308042EB27F4D84586D90F6679029A4DEEFAF9F3ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

21036

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

GetWindowThreadProcessId EnumWindows GetWindowTextLengthW GetWindowTextW IsWindowVisible

kernel32

IsProcessorFeaturePresent WriteConsoleW HeapReAlloc HeapSize ReadConsoleW GetStringTypeW GetStdHandle CreateDirectoryW CreateFileW DeleteFileW GetFileAttributesW GetFileSizeEx ReadFile SetFilePointerEx WriteFile GetTempPathW CloseHandle GetLastError InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WaitForSingleObject Sleep GetCurrentProcessId CreateThread CreateRemoteThread GetExitCodeThread OpenProcess GetTickCount64 VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleHandleW GetProcAddress LoadResource LockResource SizeofResource FindResourceW LocalFree FormatMessageW WideCharToMultiByte GetConsoleMode SetConsoleMode SetConsoleCtrlHandler SetConsoleOutputCP SetConsoleTitleW CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32FirstW Module32NextW SetStdHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FlushFileBuffers GetConsoleOutputCP FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap

Sharing