file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample230506-hel4msgc84
SHA256 0da9becd4c6f6af2eb648a057cefb53d17cb2f468503a77d49d5e5f63d16d30c
MD5 720ba891c5886cb081acb101fd7692d6
SHA1 bd7fcf8153514ffeae1a6e1d526398a852488a5b
SHA512 dc79321ecee8b41b53a07f8aad04da94b03ead0589e0ef1863e42710871296e91c30be6cd06b991d22a83e593076467a1d07dff57a4f8be699d4b287334d86e4
SSDEEP 6144:fNc2wY7+OiUz5zjs01ROD3b5q6G7ZJ67HrxJaZC2K:f1wY7t99w0iD8R7fGLxJaZC2K
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH fe4f4910437a07ca9243d1b2d5dcbc9d
SHA256 0da9becd4c6f6af2eb648a057cefb53d17cb2f468503a77d49d5e5f63d16d30c
MD5 720ba891c5886cb081acb101fd7692d6
SHA1 bd7fcf8153514ffeae1a6e1d526398a852488a5b
SHA512 dc79321ecee8b41b53a07f8aad04da94b03ead0589e0ef1863e42710871296e91c30be6cd06b991d22a83e593076467a1d07dff57a4f8be699d4b287334d86e4
SSDEEP 6144:fNc2wY7+OiUz5zjs01ROD3b5q6G7ZJ67HrxJaZC2K:f1wY7t99w0iD8R7fGLxJaZC2K
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

38267

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDriveTypeW GetNumberOfConsoleInputEvents GetConsoleAliasExesLengthA InterlockedIncrement SystemTimeToFileTime EnumCalendarInfoW SetDefaultCommConfigW GetProfileSectionA SetComputerNameW CallNamedPipeW MoveFileWithProgressA GetTickCount ReadConsoleW SetCommState GetDriveTypeA SetHandleCount GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW IsProcessInJob FreeConsole InterlockedPopEntrySList GetFileAttributesW CreateFileW GetOverlappedResult CompareStringW GetStringTypeExA EnumSystemLocalesA GetProfileIntA ReleaseActCtx GetStdHandle GetCurrentDirectoryW GetProcAddress BeginUpdateResourceW SetFirmwareEnvironmentVariableW RemoveDirectoryA VerLanguageNameW SearchPathA PrepareTape GetTempFileNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW AddAtomA GlobalWire GetModuleFileNameA EnumDateFormatsA GetModuleHandleA SetLocaleInfoW lstrcatW FreeEnvironmentStringsW FindNextFileW GetConsoleTitleW SetCalendarInfoA SetThreadAffinityMask SetFileShortNameA GetVolumeNameForVolumeMountPointW DeleteFileW DebugBreak GlobalReAlloc EnumSystemLocalesW AreFileApisANSI InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError MoveFileA HeapFree HeapAlloc DeleteFileA GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetModuleFileNameW HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId CloseHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetEnvironmentStringsW GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleW

Sharing