f2py[.]exe | Triage™

General

Target
f2py.exe
Size 105KB
Sample261113-edtkjsft3y
SHA256 77a2cad4fe774bcd7fe3f92133c2f9d1be29be7ab9ff1acbd51cde3b5eaca1e9
MD5 8031cde090e1716a658f264c04c5f456
SHA1 4da6f279f2fbb9ff754f8a84ed903d764d7a8d3e
SHA512 a5eda191649ad1201f14769bc33752f6b656532e24f8429f8579db124cd69b0f47e485fa4691f1a12590837158d188354db5dd1da222d45395247c3e0e4b06d8
SSDEEP 1536:1966Spw1RSGXwStXQR1mTqZh52bAGXHnDtCdGgYluexaNSxFfHYTo+Ggh:j8wDSRUT0kbAYn2GgYlBYN2fHYTo+xh
TLSH
T188B36A0A33D420FDD0675274CDB68A15D3B2BC2A4274934F27A47B6A1F733826D2E722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2py.exe

File Explorer

f2py.exe

.exe 105KB

f2py.exe

IMPHASH c51d659b4b1142d4af3795d09f1d63f7
SHA256 77a2cad4fe774bcd7fe3f92133c2f9d1be29be7ab9ff1acbd51cde3b5eaca1e9
MD5 8031cde090e1716a658f264c04c5f456
SHA1 4da6f279f2fbb9ff754f8a84ed903d764d7a8d3e
SHA512 a5eda191649ad1201f14769bc33752f6b656532e24f8429f8579db124cd69b0f47e485fa4691f1a12590837158d188354db5dd1da222d45395247c3e0e4b06d8
SSDEEP 1536:1966Spw1RSGXwStXQR1mTqZh52bAGXHnDtCdGgYluexaNSxFfHYTo+Ggh:j8wDSRUT0kbAYn2GgYlBYN2fHYTo+xh
TLSH
T188B36A0A33D420FDD0675274CDB68A15D3B2BC2A4274934F27A47B6A1F733826D2E722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

17020

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Vinay\Projects\simple_launcher\dist\t64.pdb

kernel32

ExitProcess GetCommandLineW SearchPathW SetInformationJobObject CreateProcessW SetHandleInformation WaitForSingleObjectEx AssignProcessToJobObject FormatMessageW GetExitCodeProcess GetModuleFileNameW QueryInformationJobObject MultiByteToWideChar GetStartupInfoW GetTempPathW CreateJobObjectA GetStdHandle GetLastError SetStdHandle GetFileType SetConsoleCtrlHandler SetCurrentDirectoryW CloseHandle HeapSize GetProcessHeap SetEndOfFile SetEnvironmentVariableW HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetStringTypeW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer DecodePointer TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount GetCommandLineA RtlUnwindEx HeapSetInformation GetVersion HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc GetProcAddress GetModuleHandleW WriteFile SetHandleCount DeleteCriticalSection Sleep LCMapStringW ReadFile SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA WideCharToMultiByte QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CreateFileW LoadLibraryW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers CompareStringW WriteConsoleW

shlwapi

StrStrIW PathRemoveFileSpecW PathCombineW

Sharing