Project1[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Project1.exe
Size 22KB
Sample261024-l6mq2ahs3x
SHA256 8bb336d74c844bea7f44e794f1d854d5a784e118db91f39e4654c7e0996630e2
MD5 0c49a0ff220a576c0b4e978064c5d917
SHA1 d37819f7eba2f6d4e2029ca6c12f75379eead562
SHA512 4f66efe2c540e7293fa97dc661a655b618ee414c080ea6e095643b7391b72f59af39ad838d0159e2ce97502a763713591e45631df6197d6fae85ff5ca1b163d6
SSDEEP 384:va60h3uUJrNcFcBE7ksNpThkYfHIvNz4oSn9N9fEs3UUU33gp:yuQUQmkUThkYfpom3NU33U
TLSH
T1EDA26B5BE30A06FEE6A5E1BDC8E7B516F3F17C08172286CF1781815A0E763D4AE3A541
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project1.exe

File Explorer

Project1.exe

.exe 22KB

Project1.exe

IMPHASH f1c51f1fdbccc572e361f611171bc0d0
SHA256 8bb336d74c844bea7f44e794f1d854d5a784e118db91f39e4654c7e0996630e2
MD5 0c49a0ff220a576c0b4e978064c5d917
SHA1 d37819f7eba2f6d4e2029ca6c12f75379eead562
SHA512 4f66efe2c540e7293fa97dc661a655b618ee414c080ea6e095643b7391b72f59af39ad838d0159e2ce97502a763713591e45631df6197d6fae85ff5ca1b163d6
SSDEEP 384:va60h3uUJrNcFcBE7ksNpThkYfHIvNz4oSn9N9fEs3UUU33gp:yuQUQmkUThkYfpom3NU33U
TLSH
T1EDA26B5BE30A06FEE6A5E1BDC8E7B516F3F17C08172286CF1781815A0E763D4AE3A541
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\Downloads\test\Project1\x64\Release\Project1.pdb

kernel32

WriteProcessMemory GetLastError ReadProcessMemory OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle Module32FirstW Module32NextW GetCurrentThreadId Sleep QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetModuleHandleW

msvcp140

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z _Query_perf_frequency ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z _Query_perf_counter ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp memcpy __current_exception_context __current_exception __std_exception_destroy __std_exception_copy __std_terminate __C_specific_handler _CxxThrowException memset

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free _set_new_mode

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fflush __p__commode _set_fmode puts __stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

wcslen tolower

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _crt_atexit terminate _cexit _c_exit __p___argc _exit _initialize_onexit_table _register_thread_local_exe_atexit_callback exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argv _set_app_type _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale