Project1[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Project1.exe
Size 574KB
Sample261024-p71aasfa35
SHA256 e6ebb5a7336ad96eaf43c50a9bb8c90b447ab331e517911b880ee1f2832204f9
MD5 74e3c2e188d23c0d830608dd23499361
SHA1 b1593818efd8e0c857e3eb88b8cb2b49e79f4017
SHA512 1216e072d9bc0047e2327e61bf699bf50bbbef95051f8aed31bf041580ccbe418203f342049e2de6bde3ef31fadc61a5e70a3051c074f0be560f6d7c3d02f41c
SSDEEP 12288:nvwNTD3eqzApoIMGqSyymH1+BYianet3uc:oNTbRzmPMGcianG3u
TLSH
T119C49E80F1E945E8D03BA175969AB22FFA363444172449CB63D145982FF37E0A7FB223
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project1.exe

File Explorer

Project1.exe

.exe 574KB

Project1.exe

IMPHASH bd27ae6243410768d05f3ae8f19618f7
SHA256 e6ebb5a7336ad96eaf43c50a9bb8c90b447ab331e517911b880ee1f2832204f9
MD5 74e3c2e188d23c0d830608dd23499361
SHA1 b1593818efd8e0c857e3eb88b8cb2b49e79f4017
SHA512 1216e072d9bc0047e2327e61bf699bf50bbbef95051f8aed31bf041580ccbe418203f342049e2de6bde3ef31fadc61a5e70a3051c074f0be560f6d7c3d02f41c
SSDEEP 12288:nvwNTD3eqzApoIMGqSyymH1+BYianet3uc:oNTbRzmPMGcianG3u
TLSH
T119C49E80F1E945E8D03BA175969AB22FFA363444172449CB63D145982FF37E0A7FB223
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

472688

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\Downloads\test\Project1\x64\Release\Project1.pdb

kernel32

IsDBCSLeadByte GetProcAddress FreeLibrary QueryPerformanceCounter OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle Module32FirstW ReadProcessMemory GlobalLock QueryPerformanceFrequency GetModuleHandleW GlobalFree InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GlobalAlloc LoadLibraryA GetLocaleInfoA GlobalUnlock WriteProcessMemory WideCharToMultiByte MultiByteToWideChar Module32NextW OutputDebugStringA

user32

GetSystemMetrics GetWindowLongW DispatchMessageW PeekMessageW GetWindowRect ShowWindow GetClipboardData CreateWindowExA SetLayeredWindowAttributes TranslateMessage SetWindowLongW PostQuitMessage FindWindowA RegisterClassExA IsWindowUnicode ReleaseCapture SetCursorPos DefWindowProcW GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect SetWindowPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard SetClipboardData

shell32

ShellExecuteW

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetContext

d3dcompiler_47

D3DCompile

msvcp140

?_Xbad_function_call@std@@YAXXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ?_Xlength_error@std@@YAXPEBD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?good@ios_base@std@@QEBA_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __current_exception strchr __C_specific_handler _CxxThrowException __std_terminate __current_exception_context memset memmove memcpy memcmp memchr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode ftell __acrt_iob_func __stdio_common_vsscanf fread __stdio_common_vsprintf _wfopen fwrite fflush fseek fclose __stdio_common_vfprintf

api-ms-win-crt-time-l1-1-0

_time64 _localtime64_s

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

wcslen strlen strncmp strncpy strcmp tolower

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initterm _initterm_e exit _exit terminate __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _cexit _configure_narrow_argv _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _seh_filter_exe _set_app_type

api-ms-win-crt-math-l1-1-0

cosf atan2f ceilf powf log floorf sqrtf logf pow sinf acosf sqrt __setusermatherr fmodf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale