Main (1)[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Main (1).exe
Size 3.1MB
Sample261017-gp7yesav2n
SHA256 d57e300fdb466d508186237100cc6623a2a63c4019f0d284ebd6c6d8020b2d7d
MD5 733a25f2b1f8419c42f4b24203194017
SHA1 d6f642c6ed99deb357bd4d0bdc0e99b05b8297d2
SHA512 27469cdaa8ac9ae897ee77d222b3b3dfd4fa5c31ade4c3f0aeb01edd70589b93216dbe7d3f454d78d85e65ff7ff084910ac94769bc9521a06897b762ef085510
SSDEEP 49152:xW8Oqg+daEMumSLFvnZh8NMNNhABwR3Z2amTJ3t/Sl1SpLvLvc77Z9Jc4hl5:xBpWiOAhAqR3ZLmF3t/Fp3c73Jc4hz
TLSH
T1EEE5F03273E6C0E4E963C1F2C9219AA6EA72749113F856DB25E08E1EDF676F00977710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Main (1).exe

File Explorer

Main (1).exe

.exe 3.1MB

Main (1).exe

IMPHASH f9e6a13e9ca982e041795c70c5dcb4ba
SHA256 d57e300fdb466d508186237100cc6623a2a63c4019f0d284ebd6c6d8020b2d7d
MD5 733a25f2b1f8419c42f4b24203194017
SHA1 d6f642c6ed99deb357bd4d0bdc0e99b05b8297d2
SHA512 27469cdaa8ac9ae897ee77d222b3b3dfd4fa5c31ade4c3f0aeb01edd70589b93216dbe7d3f454d78d85e65ff7ff084910ac94769bc9521a06897b762ef085510
SSDEEP 49152:xW8Oqg+daEMumSLFvnZh8NMNNhABwR3Z2amTJ3t/Sl1SpLvLvc77Z9Jc4hl5:xBpWiOAhAqR3ZLmF3t/Fp3c73Jc4hz
TLSH
T1EEE5F03273E6C0E4E963C1F2C9219AA6EA72749113F856DB25E08E1EDF676F00977710
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

951052

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

WSAGetLastError getservbyname htonl send recv inet_addr WSAAsyncSelect inet_ntoa gethostbyname WSASetLastError ioctlsocket htons gethostbyaddr getservbyport ntohs WSAStartup gethostname shutdown WSACleanup closesocket connect socket

winmm

joyGetPosEx mciSendStringW joyGetDevCapsW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

comctl32

ImageList_GetIconSize ImageList_Create ImageList_Destroy ImageList_AddMasked ImageList_ReplaceIcon CreateStatusWindowW

psapi

GetProcessImageFileNameW

wininet

InternetCloseHandle InternetReadFileExA InternetReadFile InternetOpenW InternetOpenUrlW

shlwapi

StrCmpLogicalW

uxtheme

EnableThemeDialogTexture SetWindowTheme IsAppThemed

dwmapi

DwmGetWindowAttribute

kernel32

GetCurrentProcess ExitProcess IsDebuggerPresent VirtualProtect GetModuleHandleA EnumResourceNamesW GlobalLock GlobalAlloc GlobalFree GlobalUnlock WideCharToMultiByte GetCPInfo GetSystemDirectoryA LoadLibraryA FreeLibrary GetCurrentThreadId GetEnvironmentVariableW IsValidCodePage LoadLibraryW GetLastError OutputDebugStringW lstrcmpiW GetStringTypeExW CreateThread SetThreadPriority GetExitCodeThread CloseHandle CreateMutexW SetLastError GetDiskFreeSpaceExW GetDriveTypeW CreateFileW DeviceIoControl SetVolumeLabelW GetVolumeInformationW GetDiskFreeSpaceW SetEnvironmentVariableW MultiByteToWideChar GetFullPathNameW GetFileAttributesW CreateDirectoryW ReadFile DeleteFileW FindResourceW LoadResource LockResource WriteFile SizeofResource SetCurrentDirectoryW CompareStringOrdinal CopyFileW SetFileAttributesW FindFirstFileW FindNextFileW FindClose FileTimeToLocalFileTime GetProcAddress GetSystemTimeAsFileTime SetFileTime GetFileSizeEx MoveFileW GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass GetProcessId QueryDosDeviceW EnterCriticalSection LeaveCriticalSection Beep GetLocalTime GetDateFormatW GetTimeFormatW GetDateFormatEx GetTickCount64 GetSystemTime GetSystemDefaultUILanguage GetComputerNameW GetCurrentDirectoryW GetSystemWindowsDirectoryW GetTempPathW WaitForSingleObject GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetVersionExW InitializeCriticalSection DeleteCriticalSection GetModuleFileNameW SetDllDirectoryW GetModuleHandleExW GetShortPathNameW CreateProcessW FormatMessageW CompareStringW RemoveDirectoryW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW WritePrivateProfileStringW WritePrivateProfileSectionW SetEndOfFile GetACP GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize IsWow64Process VirtualAllocEx VirtualFreeEx LoadLibraryExW GlobalSize GetModuleHandleW SetErrorMode Sleep GetTickCount MulDiv RtlUnwindEx RtlPcToFileHeader RaiseException EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetCommandLineA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCommandLineW HeapSize HeapReAlloc HeapQueryInformation HeapFree HeapAlloc GetProcessHeap FindFirstFileExW GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx LCMapStringW GetCurrentThread SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW LocalFileTimeToFileTime InitializeSListHead

user32

SetWindowRgn SetWindowPos EnumWindows IsZoomed IsIconic GetLayeredWindowAttributes SetLayeredWindowAttributes DestroyWindow RegisterClassExW SystemParametersInfoW CreateWindowExW GetMenu EnableMenuItem LoadAcceleratorsW AddClipboardFormatListener RemoveClipboardFormatListener LoadImageW PostQuitMessage CheckMenuItem RegisterWindowMessageW DefWindowProcW SetForegroundWindow MonitorFromPoint GetSystemMenu GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringW ExitWindowsEx GetPropW GetClassLongW SetMenu SetPropW RemovePropW GetSysColor RedrawWindow DrawTextW SetParent GetClassInfoExW AdjustWindowRectEx GetAncestor UpdateWindow FlashWindow GetMessagePos GetSysColorBrush FillRect GetClassLongPtrW CallWindowProcW CheckRadioButton IntersectRect GetUpdateRect PtInRect CreateDialogIndirectParamW CreateAcceleratorTableW DestroyAcceleratorTable InsertMenuItemW RemoveMenu SetMenuItemInfoW GetMenuItemInfoW SetMenuDefaultItem CreateMenu CreatePopupMenu SetMenuInfo DestroyMenu TrackPopupMenuEx CopyImage CreateIconIndirect CreateIconFromResourceEx DrawIconEx EnumClipboardFormats GetWindow BringWindowToTop GetQueueStatus GetLastActivePopup GetShellWindow VkKeyScanExW IsChild GetKeyboardLayoutNameW ActivateKeyboardLayout GetGUIThreadInfo GetWindowTextW mouse_event WindowFromPoint keybd_event SetKeyboardState GetKeyboardState GetCursorPos GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey SendMessageTimeoutW CharUpperW UnhookWindowsHookEx SetWindowsHookExW PostThreadMessageW IsCharAlphaNumericW IsCharUpperW IsCharLowerW ToUnicodeEx GetKeyboardLayout CallNextHookEx CharLowerW ReleaseDC DialogBoxParamW ScrollWindow GetSystemMetrics GetWindowRect GetWindowLongPtrW SetFocus DefDlgProcW MoveWindow MapWindowPoints GetClientRect EnableWindow MapDialogRect GetDlgItem SetWindowLongPtrW SetWindowTextW MessageBoxW OpenClipboard GetClipboardData GetClipboardFormatNameW CloseClipboard SetClipboardData EmptyClipboard PostMessageW FindWindowW EndDialog IsWindowVisible SetActiveWindow EnumChildWindows GetLastInputInfo LoadCursorW GetCursorInfo ClientToScreen MessageBeep GetIconInfo GetWindowTextLengthW InvalidateRect AdjustWindowRect SetDlgItemTextW SendDlgItemMessageW IsCharAlphaW DestroyIcon IsWindow DispatchMessageW TranslateMessage ShowWindow IsClipboardFormatAvailable CountClipboardFormats SetWindowLongW ScreenToClient BlockInput IsDialogMessageW SendMessageW IsWindowEnabled GetWindowLongW GetKeyState TranslateAcceleratorW KillTimer PeekMessageW GetFocus GetClassNameW GetWindowThreadProcessId GetForegroundWindow GetMessageW SetTimer GetParent GetDlgCtrlID GetMonitorInfoW EnumDisplayMonitors MapVirtualKeyExW MapVirtualKeyW GetDC

gdi32

GdiFlush CreateDIBSection GetObjectW EnumFontFamiliesExW SetBrushOrgEx CreatePatternBrush GetClipBox SetBkMode SetBkColor GetDeviceCaps CreateCompatibleDC CreateFontIndirectW GetStockObject CreateSolidBrush GetCharABCWidthsW GetTextMetricsW GetPixel GetDIBits SelectObject CreateDCW CreateFontW CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteObject BitBlt CreateCompatibleBitmap DeleteDC GetSystemPaletteEntries SetTextColor

advapi32

UnlockServiceDatabase RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegDeleteValueW GetUserNameW RegConnectRegistryW RegCloseKey RegOpenKeyExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW CreateProcessWithLogonW OpenSCManagerW LockServiceDatabase CloseServiceHandle RegDeleteKeyExW

shell32

SHBrowseForFolderW DragFinish SHGetKnownFolderPath ExtractIconW DragQueryPoint SHEmptyRecycleBinW SHFileOperationW SHGetPathFromIDListW DragQueryFileW SHGetDesktopFolder SHGetMalloc SHCreateItemFromParsingName ShellExecuteExW SHGetFolderPathW Shell_NotifyIconW

ole32

CoCreateInstance CoTaskMemFree CLSIDFromString OleInitialize OleFlushClipboard OleUninitialize CoInitialize CoUninitialize CLSIDFromProgID CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayDestroy SysFreeString GetActiveObject SysStringLen OleLoadPicture VariantClear VariantChangeType SysAllocString SafeArrayCopy SysAllocStringLen VariantCopyInd SafeArrayGetUBound SafeArrayCreate SafeArrayGetLBound SafeArrayGetDim SafeArrayLock SafeArrayPtrOfIndex SafeArrayUnlock