Project1[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Project1.exe
Size 477KB
Sample261024-prvd4shy61
SHA256 b039b836672c93fed3a223e856accd17beee62df468023c1baf7eece5001754e
MD5 53dd342dd09544e53e04ac55d09b6ca0
SHA1 2d2eaf1861c8e5ed0dcb6343790372a8319e3798
SHA512 918ecb23c4da6749c2db8f8df6ef582e22a4578d21ef1a36fbcb634e224b3c4f4317d76ab85a59b445d1196c1062a7b0bdcc51a4709c247713143ecc760f1b21
SSDEEP 12288:Y8qd8ilGIJqjEPx8DpAih4pHPypW3ojYiQnx8aJ:K8UXqQJ8DpAzPypW3oMiQnx8aJ
TLSH
T1D3A4AF80F1B946E8D03BA274969BF71BF9363448171049CF63D455682FF27E4AAFB212
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project1.exe

File Explorer

Project1.exe

.exe 477KB

Project1.exe

IMPHASH 245a294d3669bb06d0acaa669e1389ce
SHA256 b039b836672c93fed3a223e856accd17beee62df468023c1baf7eece5001754e
MD5 53dd342dd09544e53e04ac55d09b6ca0
SHA1 2d2eaf1861c8e5ed0dcb6343790372a8319e3798
SHA512 918ecb23c4da6749c2db8f8df6ef582e22a4578d21ef1a36fbcb634e224b3c4f4317d76ab85a59b445d1196c1062a7b0bdcc51a4709c247713143ecc760f1b21
SSDEEP 12288:Y8qd8ilGIJqjEPx8DpAih4pHPypW3ojYiQnx8aJ:K8UXqQJ8DpAzPypW3oMiQnx8aJ
TLSH
T1D3A4AF80F1B946E8D03BA274969BF71BF9363448171049CF63D455682FF27E4AAFB212
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

385520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\Downloads\test\Project1\x64\Release\Project1.pdb

kernel32

IsDBCSLeadByte GetProcAddress FreeLibrary QueryPerformanceCounter OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle Module32FirstW ReadProcessMemory GlobalLock QueryPerformanceFrequency GetModuleHandleW GlobalFree InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GlobalAlloc LoadLibraryA GetLocaleInfoA GlobalUnlock WriteProcessMemory WideCharToMultiByte MultiByteToWideChar Module32NextW OutputDebugStringA

user32

EmptyClipboard GetWindowRect GetAsyncKeyState DispatchMessageW PeekMessageW SetWindowPos ShowWindow GetWindowLongW CreateWindowExA SetLayeredWindowAttributes TranslateMessage SetWindowLongW PostQuitMessage FindWindowA RegisterClassExA CloseClipboard OpenClipboard GetCursorPos DefWindowProcW GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect GetSystemMetrics SetCursorPos ReleaseCapture IsWindowUnicode SetClipboardData GetClipboardData

shell32

ShellExecuteW

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetContext

d3dcompiler_47

D3DCompile

msvcp140

?_Xbad_function_call@std@@YAXXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ?_Xlength_error@std@@YAXPEBD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?good@ios_base@std@@QEBA_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __current_exception __current_exception_context __C_specific_handler _CxxThrowException memset memmove memchr memcmp memcpy __std_terminate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf _set_fmode __p__commode fread __stdio_common_vsprintf _wfopen fwrite __stdio_common_vfprintf fclose fflush __acrt_iob_func ftell fseek

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free _set_new_mode _callnewh malloc

api-ms-win-crt-string-l1-1-0

strcmp strlen tolower wcslen

api-ms-win-crt-math-l1-1-0

acosf lroundf cosf sqrtf ceilf sqrt sinf powf __setusermatherr atan2f fmodf

api-ms-win-crt-runtime-l1-1-0

_cexit _seh_filter_exe _set_app_type _get_initial_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv terminate

api-ms-win-crt-locale-l1-1-0

_configthreadlocale