Project1[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Project1.exe
Size 542KB
Sample261024-peeswsbw9r
SHA256 17c0f556865deb21ef6f772d241e936a0cda735233204acede33f71bfda5c02a
MD5 52441989248077b6baec9178a0412efd
SHA1 9bf04c157dac7c6372f8e668430131a433688977
SHA512 77fd4d643088584d24215b351f6e683b0a634e9de39d2ed2bb0f8cc0650a59466325d3bd9d107b3e4ff54b16f83393e368ba594579181133f9bed7eb0463edcd
SSDEEP 12288:pAKPASPO6ii9e/zkc/G3B0Cj1T77vABIYiBnHJMGuCF9:hPRFiMebkcKtt7EiBnmGuCf
TLSH
T16EC49E80F1E953F8D02B9275969AB21BFA363448172459CB63D545982FF33E0A7FB213
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project1.exe

File Explorer

Project1.exe

.exe 542KB

Project1.exe

IMPHASH 872d5a3ef768e292e72452175507dec7
SHA256 17c0f556865deb21ef6f772d241e936a0cda735233204acede33f71bfda5c02a
MD5 52441989248077b6baec9178a0412efd
SHA1 9bf04c157dac7c6372f8e668430131a433688977
SHA512 77fd4d643088584d24215b351f6e683b0a634e9de39d2ed2bb0f8cc0650a59466325d3bd9d107b3e4ff54b16f83393e368ba594579181133f9bed7eb0463edcd
SSDEEP 12288:pAKPASPO6ii9e/zkc/G3B0Cj1T77vABIYiBnHJMGuCF9:hPRFiMebkcKtt7EiBnmGuCf
TLSH
T16EC49E80F1E953F8D02B9275969AB21BFA363448172459CB63D545982FF33E0A7FB213
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

445824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\Downloads\test\Project1\x64\Release\Project1.pdb

kernel32

IsDBCSLeadByte GetProcAddress FreeLibrary QueryPerformanceCounter OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle Module32FirstW ReadProcessMemory GlobalLock QueryPerformanceFrequency GetModuleHandleW GlobalFree InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GlobalAlloc LoadLibraryA GetLocaleInfoA GlobalUnlock WriteProcessMemory WideCharToMultiByte MultiByteToWideChar Module32NextW OutputDebugStringA

user32

GetClipboardData GetWindowRect DispatchMessageW PeekMessageW CreateWindowExA SetWindowPos GetAsyncKeyState GetWindowLongW SetLayeredWindowAttributes TranslateMessage SetWindowLongW PostQuitMessage FindWindowA RegisterClassExA DefWindowProcW IsWindowUnicode ReleaseCapture SetCursorPos GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect ShowWindow GetCursorPos EmptyClipboard OpenClipboard CloseClipboard SetClipboardData

shell32

ShellExecuteW

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetContext

d3dcompiler_47

D3DCompile

msvcp140

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ?_Xlength_error@std@@YAXPEBD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?good@ios_base@std@@QEBA_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __current_exception __current_exception_context __C_specific_handler strchr __std_terminate memset memmove memcpy _CxxThrowException memcmp memchr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode ftell __acrt_iob_func __stdio_common_vsscanf fread __stdio_common_vsprintf _wfopen fwrite __stdio_common_vfprintf fseek fclose fflush

api-ms-win-crt-time-l1-1-0

_time64 _localtime64_s

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

wcslen strcmp strlen strncmp strncpy tolower

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-runtime-l1-1-0

_set_app_type _get_initial_narrow_environment _initterm _initterm_e exit _exit _seh_filter_exe __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _crt_atexit terminate system _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _cexit

api-ms-win-crt-math-l1-1-0

atan2f ceilf powf log cosf sqrtf logf pow sinf acosf __setusermatherr sqrt fmodf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale