Project1[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Project1.exe
Size 440KB
Sample261102-txde1adw6k
SHA256 98cc2109467b72dd22e3a832cfd42fbf31828781b01f09c0c578e1618c0ea61c
MD5 0fe161b30ffc704b9fdbc18edb246bd9
SHA1 40a24cf6a51e9afeb1503987f274c8a1aa1ad02f
SHA512 25e7366003b03a999892817e08046bae83415b708896322117332b10329896e1f803055a5d08abcf37eafcee85c339cfa8ae40c83fcc61ca3588052434575f29
SSDEEP 12288:/ifBhKk0vf2Yl4sFJtnAHTR2gPhPfPUk1WbGjZCbybZebS9ZiP1Zwm/ZWWRZgbN3:/ifqk0vf2Yl1AHzltnbdu6z
TLSH
T15DA49D28E6140975E573D5B8DB834603F77238478335C5EB37EC9AA21F379E49A3AA01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project1.exe

File Explorer

Project1.exe

.exe 440KB

Project1.exe

IMPHASH 3cacc6fdd53dba608b4c1d6b6f7ed902
SHA256 98cc2109467b72dd22e3a832cfd42fbf31828781b01f09c0c578e1618c0ea61c
MD5 0fe161b30ffc704b9fdbc18edb246bd9
SHA1 40a24cf6a51e9afeb1503987f274c8a1aa1ad02f
SHA512 25e7366003b03a999892817e08046bae83415b708896322117332b10329896e1f803055a5d08abcf37eafcee85c339cfa8ae40c83fcc61ca3588052434575f29
SSDEEP 12288:/ifBhKk0vf2Yl4sFJtnAHTR2gPhPfPUk1WbGjZCbybZebS9ZiP1Zwm/ZWWRZgbN3:/ifqk0vf2Yl1AHzltnbdu6z
TLSH
T15DA49D28E6140975E573D5B8DB834603F77238478335C5EB37EC9AA21F379E49A3AA01
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

200624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Gaming\source\repos\Project1\x64\Release\Project1.pdb

webview2loader

CreateCoreWebView2EnvironmentWithOptions

kernel32

TerminateProcess GetModuleFileNameW GetEnvironmentVariableW GetTempPathW CreateMutexW FindClose WaitForSingleObject CreateFileW GetFileAttributesW GetSystemDirectoryW OpenProcess SetFileAttributesW CreateToolhelp32Snapshot MultiByteToWideChar GetLastError GetFileAttributesExW Process32NextW LockResource DeleteFileW Process32FirstW CloseHandle WriteFile FindResourceW GetWindowsDirectoryW FindFirstFileExW ExitProcess GetCurrentProcessId CreateProcessW WideCharToMultiByte QueryFullProcessImageNameW GetSystemTimeAsFileTime MulDiv GetDriveTypeW GetExitCodeProcess ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared SleepConditionVariableSRW Sleep GetCurrentThreadId lstrcpynW LoadResource WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetLogicalDrives SizeofResource ReadFile InitializeSListHead ReleaseSRWLockExclusive FindNextFileW MoveFileExW

user32

FindWindowW LoadCursorW GetClientRect TranslateMessage DestroyIcon DispatchMessageW ShowWindow DestroyMenu RegisterClassExW CreatePopupMenu GetSystemMetrics GetMessageW DefWindowProcW PostMessageW SetProcessDpiAwarenessContext DestroyWindow SetWindowPos MessageBoxW GetDpiForWindow TrackPopupMenu CreateWindowExW GetCursorPos IsIconic GetDpiForSystem AppendMenuW PostQuitMessage LoadImageW SetForegroundWindow UpdateWindow RegisterWindowMessageW CharLowerBuffW

gdi32

CreateSolidBrush

advapi32

RegOpenKeyExW RegSetValueExW RegCloseKey RegDeleteValueW

shell32

SHCreateDirectoryExW SHGetKnownFolderPath Shell_NotifyIconW ord680 ShellExecuteW

ole32

CoInitializeEx CoCreateInstance CoTaskMemFree CoUninitialize

msvcp140

_Mtx_unlock _Thrd_join _Xtime_get_ticks _Thrd_detach _Query_perf_counter _Thrd_id _Cnd_wait _Cnd_do_broadcast_at_thread_exit _Cnd_broadcast _Mtx_lock ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Throw_Cpp_error@std@@YAXH@Z _Query_perf_frequency _Thrd_hardware_concurrency _Cnd_signal

ws2_32

ntohs inet_ntop

iphlpapi

GetExtendedTcpTable

winhttp

WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpReceiveResponse WinHttpOpen WinHttpQueryHeaders WinHttpReadData WinHttpCloseHandle

bcrypt

BCryptFinishHash BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptHashData BCryptCreateHash BCryptOpenAlgorithmProvider

wintrust

WinVerifyTrust

dwmapi

DwmSetWindowAttribute

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset memmove memcpy memcmp __std_terminate wcsstr __std_exception_copy __std_exception_destroy __C_specific_handler __current_exception_context _CxxThrowException __current_exception

api-ms-win-crt-time-l1-1-0

strftime _localtime64_s _time64

api-ms-win-crt-convert-l1-1-0

atof atoi atoll strtod

api-ms-win-crt-runtime-l1-1-0

_cexit terminate _seh_filter_exe _set_app_type _crt_atexit _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e exit _exit _register_onexit_function _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _beginthreadex _configure_wide_argv

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode __stdio_common_vsprintf

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh malloc free

api-ms-win-crt-math-l1-1-0

ceilf floor __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

strlen wcslen