Project1[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Project1.exe
Size 544KB
Sample261024-ph47ysbx4k
SHA256 6a07ec826b09519709dff3fb37b376575579b8e9d63a8f3506ecc52394c0e82f
MD5 1749e53c1ef059356375490b7d2489ed
SHA1 f7889ba41582d96b65f11f1cccf60525f143e6ed
SHA512 1605a0543ac6e4419e5fa1ddddb158ff2d1ac2587bd12f047004c5014a6336040c16f644c3b7205bb2f4966d75035edb4b136b1ab8d1e367149e27dfecf99e24
SSDEEP 12288:imFm3KGhoqh6CRRwa63oUbAta2EwtMYimnyP:dm3GqMCzwa/bVimnA
TLSH
T1FFC49E80F1E853E8D02B9275969AF21FFA363448172459CB63D145982FF67E0A7FB213
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project1.exe

File Explorer

Project1.exe

.exe 544KB

Project1.exe

IMPHASH c5ea6f035833a55e55cdc8310434a302
SHA256 6a07ec826b09519709dff3fb37b376575579b8e9d63a8f3506ecc52394c0e82f
MD5 1749e53c1ef059356375490b7d2489ed
SHA1 f7889ba41582d96b65f11f1cccf60525f143e6ed
SHA512 1605a0543ac6e4419e5fa1ddddb158ff2d1ac2587bd12f047004c5014a6336040c16f644c3b7205bb2f4966d75035edb4b136b1ab8d1e367149e27dfecf99e24
SSDEEP 12288:imFm3KGhoqh6CRRwa63oUbAta2EwtMYimnyP:dm3GqMCzwa/bVimnA
TLSH
T1FFC49E80F1E853E8D02B9275969AF21FFA363448172459CB63D145982FF67E0A7FB213
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

447456

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\Downloads\test\Project1\x64\Release\Project1.pdb

kernel32

IsDBCSLeadByte GetProcAddress FreeLibrary QueryPerformanceCounter OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle Module32FirstW ReadProcessMemory GlobalLock QueryPerformanceFrequency GetModuleHandleW GlobalFree InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GlobalAlloc LoadLibraryA GetLocaleInfoA GlobalUnlock WriteProcessMemory WideCharToMultiByte MultiByteToWideChar Module32NextW OutputDebugStringA

user32

GetWindowRect GetWindowLongW GetClipboardData SetWindowPos DispatchMessageW PeekMessageW CreateWindowExA GetSystemMetrics GetAsyncKeyState SetLayeredWindowAttributes TranslateMessage SetWindowLongW PostQuitMessage FindWindowA RegisterClassExA DefWindowProcW IsWindowUnicode ReleaseCapture SetCursorPos GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect ShowWindow EmptyClipboard GetCursorPos OpenClipboard CloseClipboard SetClipboardData

shell32

ShellExecuteW

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetContext

d3dcompiler_47

D3DCompile

msvcp140

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ?_Xlength_error@std@@YAXPEBD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?good@ios_base@std@@QEBA_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __current_exception __current_exception_context __C_specific_handler strchr __std_terminate memset memmove memcpy _CxxThrowException memcmp memchr

api-ms-win-crt-stdio-l1-1-0

ftell __p__commode _set_fmode __acrt_iob_func fflush __stdio_common_vsscanf fread _wfopen fwrite __stdio_common_vfprintf fseek fclose __stdio_common_vsprintf

api-ms-win-crt-time-l1-1-0

_time64 _localtime64_s

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free _callnewh _set_new_mode malloc

api-ms-win-crt-string-l1-1-0

tolower wcslen strcmp strlen strncmp strncpy

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _get_initial_narrow_environment _initterm _initterm_e exit _exit terminate __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _cexit _configure_narrow_argv _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _set_app_type

api-ms-win-crt-math-l1-1-0

ceilf acosf atan2f fmodf log cosf powf logf pow sinf sqrtf sqrt __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale