Project1[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Project1.exe
Size 429KB
Sample261024-mtrd5ayv9p
SHA256 151f0c46317d9771621544a1bef90c43210b90db950a4e4b869792a22e81f25a
MD5 e3350bcdf58be6839a8ce50f5abaf280
SHA1 9374d223ca391b463433515277f668122467735b
SHA512 e226c9286809a9aa986bccc8f043f058f1087f2382d62fd8208ea03c9c1f47d6571402e7acfad652800ecf076729308be4e3ddd76b969a2f2000a9ad0ed0bc15
SSDEEP 6144:A3l1Ux9zwiA/mo9EXdXzSrOguGE7hJ+6hRzCu+NiLMgLuBrBx7S9EndUW/lPUiku:Aa9YeoCXwYxhRzCu+NiYgE3ZQYiynwG
TLSH
T1A1949F81F1EC44E8D0279278969AB71BF93A344417105ACB7394D1682FF27E4ABFB712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project1.exe

File Explorer

Project1.exe

.exe 429KB

Project1.exe

IMPHASH 2ab2934853dcce60d130cdd21f5a5b5c
SHA256 151f0c46317d9771621544a1bef90c43210b90db950a4e4b869792a22e81f25a
MD5 e3350bcdf58be6839a8ce50f5abaf280
SHA1 9374d223ca391b463433515277f668122467735b
SHA512 e226c9286809a9aa986bccc8f043f058f1087f2382d62fd8208ea03c9c1f47d6571402e7acfad652800ecf076729308be4e3ddd76b969a2f2000a9ad0ed0bc15
SSDEEP 6144:A3l1Ux9zwiA/mo9EXdXzSrOguGE7hJ+6hRzCu+NiLMgLuBrBx7S9EndUW/lPUiku:Aa9YeoCXwYxhRzCu+NiYgE3ZQYiynwG
TLSH
T1A1949F81F1EC44E8D0279278969AB71BF93A344417105ACB7394D1682FF27E4ABFB712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

343248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\Downloads\test\Project1\x64\Release\Project1.pdb

kernel32

IsDBCSLeadByte GetProcAddress FreeLibrary QueryPerformanceCounter OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle Module32FirstW ReadProcessMemory GlobalLock QueryPerformanceFrequency GetModuleHandleW GlobalFree InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GlobalAlloc LoadLibraryA GetLocaleInfoA GlobalUnlock WriteProcessMemory WideCharToMultiByte MultiByteToWideChar Module32NextW OutputDebugStringA

user32

GetCursorPos DestroyWindow DispatchMessageW PeekMessageW CreateWindowExA SetWindowPos GetAsyncKeyState GetWindowRect SetLayeredWindowAttributes TranslateMessage UnregisterClassA PostQuitMessage FindWindowA RegisterClassExA DefWindowProcW SetCursorPos ReleaseCapture IsWindowUnicode GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect ShowWindow CloseClipboard EmptyClipboard GetClipboardData SetClipboardData OpenClipboard

shell32

ShellExecuteW

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetContext

d3dcompiler_47

D3DCompile

msvcp140

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ?_Xlength_error@std@@YAXPEBD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?good@ios_base@std@@QEBA_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __current_exception __current_exception_context __C_specific_handler _CxxThrowException memchr memcmp memcpy memset memmove __std_terminate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf fread __stdio_common_vsprintf _set_fmode __p__commode _wfopen fwrite __stdio_common_vfprintf fseek fflush __acrt_iob_func ftell fclose

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc _callnewh

api-ms-win-crt-string-l1-1-0

strcmp strlen tolower wcslen

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _cexit _initialize_onexit_table _seh_filter_exe _set_app_type _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _configure_narrow_argv __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback terminate _crt_atexit

api-ms-win-crt-math-l1-1-0

cosf sinf sqrtf acosf __setusermatherr ceilf fmodf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale