Project1[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Project1.exe
Size 603KB
Sample261024-qea1daby9n
SHA256 07ed9f1021672427e60474c4f7f3709d0585503617c4adec1bce16090d66db8b
MD5 ce503e645011fe42f095476310cc00e7
SHA1 8fda2a3617ec5a62b74c40d3083bc55fdf000720
SHA512 ff0ba2257e04fc54377f517753b0ca76f793aca41624f66cf5804ec46a2a478fe982c045d585a7d3e3f869afff3c7ff0c6883932d07cdd3a2e84a7615ea9b26f
SSDEEP 12288:Ugyuv8oqD4v39hctCZnhBvxbDLFcZ5GdqYi9nTIy:2uv8p0v3jLZnXowNi9nTI
TLSH
T140D48E81F1E945E9D03BA175A69AB21FFA363448172049CB63D045982FF67E09BFB313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project1.exe

File Explorer

Project1.exe

.exe 603KB

Project1.exe

IMPHASH 28ed64e8aea7adce6312b7c25b9798c9
SHA256 07ed9f1021672427e60474c4f7f3709d0585503617c4adec1bce16090d66db8b
MD5 ce503e645011fe42f095476310cc00e7
SHA1 8fda2a3617ec5a62b74c40d3083bc55fdf000720
SHA512 ff0ba2257e04fc54377f517753b0ca76f793aca41624f66cf5804ec46a2a478fe982c045d585a7d3e3f869afff3c7ff0c6883932d07cdd3a2e84a7615ea9b26f
SSDEEP 12288:Ugyuv8oqD4v39hctCZnhBvxbDLFcZ5GdqYi9nTIy:2uv8p0v3jLZnXowNi9nTI
TLSH
T140D48E81F1E945E9D03BA175A69AB21FFA363448172049CB63D045982FF67E09BFB313
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

497008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\Downloads\test\Project1\x64\Release\Project1.pdb

kernel32

IsDBCSLeadByte GetProcAddress FreeLibrary QueryPerformanceCounter OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle Module32FirstW GlobalLock LoadLibraryA WriteProcessMemory GetModuleHandleW AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GlobalFree GlobalAlloc QueryPerformanceFrequency GetLocaleInfoA GlobalUnlock Module32NextW WideCharToMultiByte MultiByteToWideChar ReadProcessMemory OutputDebugStringA ReleaseSRWLockExclusive

user32

TrackMouseEvent GetKeyboardLayout GetForegroundWindow ClientToScreen GetWindowRect GetWindowLongW LoadCursorW SetWindowPos SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetClipboardData GetClipboardData EmptyClipboard CloseClipboard GetCapture ScreenToClient DispatchMessageW PeekMessageW CreateWindowExA SetLayeredWindowAttributes TranslateMessage SetWindowLongW PostQuitMessage FindWindowA RegisterClassExA DefWindowProcW GetKeyState GetMessageExtraInfo SetCapture OpenClipboard SetCursorPos GetCursorPos ShowWindow

shell32

ShellExecuteW

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

msvcp140

?good@ios_base@std@@QEBA_NXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Xbad_function_call@std@@YAXXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z ?uncaught_exceptions@std@@YAHXZ

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy __std_exception_copy __current_exception strchr __C_specific_handler _CxxThrowException __std_terminate __current_exception_context memset memchr memcmp memcpy memmove

api-ms-win-crt-stdio-l1-1-0

_wfopen __stdio_common_vsprintf __stdio_common_vfprintf fseek fclose fflush fread __acrt_iob_func ftell __stdio_common_vsscanf fwrite __p__commode _set_fmode fopen

api-ms-win-crt-time-l1-1-0

_time64 _localtime64_s

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free malloc _set_new_mode _callnewh

api-ms-win-crt-string-l1-1-0

wcslen strncmp strncpy strcmp strlen tolower

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-math-l1-1-0

acosf lroundf atan2f logf log ceilf sqrtf cosf sqrt sinf floorf pow powf fmodf __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _get_initial_narrow_environment _initterm _initterm_e exit _exit _cexit __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv terminate _set_app_type

api-ms-win-crt-locale-l1-1-0

_configthreadlocale