file[.]exe | Triage™

General

Target
file.exe
Size 336KB
Sample230504-bth7zahd93
SHA256 a56cffd6ef0070340131ce0f797bfcf31496d73e135e3c651f112e936391add8
MD5 55ea906adf2a596446187015428919b0
SHA1 c983d7b42ae0c39b8e32f0c8dc56c5d8fd0eb2e4
SHA512 c0e6b77fa5b5c82732ecd5a611271b99f777ebe6ed31f2860a3a75819a891af106f7182228a8c161fd249676c14f89ad1d2e2cfd1e46b55f3e81fe5795abb8f5
SSDEEP 6144:XWN536qhrNyxLQdvuSksg7LwFJl2VjaFtY6yQGir0:C53HhrNybSpoCJlmWY6yQDr0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 336KB

file.exe

IMPHASH 2d39bee49f300ea90fe79768115a52cd
SHA256 a56cffd6ef0070340131ce0f797bfcf31496d73e135e3c651f112e936391add8
MD5 55ea906adf2a596446187015428919b0
SHA1 c983d7b42ae0c39b8e32f0c8dc56c5d8fd0eb2e4
SHA512 c0e6b77fa5b5c82732ecd5a611271b99f777ebe6ed31f2860a3a75819a891af106f7182228a8c161fd249676c14f89ad1d2e2cfd1e46b55f3e81fe5795abb8f5
SSDEEP 6144:XWN536qhrNyxLQdvuSksg7LwFJl2VjaFtY6yQGir0:C53HhrNybSpoCJlmWY6yQDr0
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35109

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SearchPathW GetDriveTypeW GetProfileIntW GetNumberOfConsoleInputEvents BuildCommDCBAndTimeoutsA InterlockedIncrement EnumCalendarInfoW GlobalSize InitializeSListHead SetComputerNameW CallNamedPipeW MoveFileWithProgressA GetTickCount FindNextVolumeMountPointA GetConsoleTitleA ReadConsoleW SetCommState GetDriveTypeA GetPrivateProfileIntA AddRefActCtx LoadLibraryW GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA WriteConsoleW GetOverlappedResult GetVolumePathNameA RaiseException GlobalUnfix GetStdHandle GetCurrentDirectoryW GetProcAddress BeginUpdateResourceW RemoveDirectoryA VerLanguageNameW PrepareTape LoadLibraryA LocalAlloc SetCalendarInfoW AddAtomW SetThreadIdealProcessor GetModuleFileNameA FindNextFileA EnumDateFormatsA GetModuleHandleA SetLocaleInfoW lstrcatW FreeEnvironmentStringsW GetStringTypeW SetThreadAffinityMask SetFileShortNameA GetVolumeNameForVolumeMountPointW DeleteFileW DebugBreak EnumSystemLocalesW DeleteFileA WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError MoveFileA HeapFree HeapAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RtlUnwind LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate WriteFile GetModuleFileNameW HeapSize CloseHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CreateFileW

Sharing