file[.]exe | Triage™

General

Target
file.exe
Size 1.2MB
Sample230507-h67vesde39
SHA256 053ae4f38b75a72d7e7331a61bf288148bee7e692b20a5035bacff23ca3539e6
MD5 59aed2b56692440215cef03771f75174
SHA1 c186c8598ca0fe964c265213dcf060ed782883b9
SHA512 32b53286031cfaa7915dbabff39ab08491b16cfd80dbc89379ec948e3fbf6121c1caef7a0ee64c56747102ec0ea06b767aec1c7439fdec181e5e1a363e83ff6b
SSDEEP 12288:RW1ip1iWqmPqIE2QZZ7jOwZY/GnrHPPy:RW1Ci6bE2QP7jOkYyjn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 1.2MB

file.exe

IMPHASH 73de971797ab27b065ec1845590dbafb
SHA256 053ae4f38b75a72d7e7331a61bf288148bee7e692b20a5035bacff23ca3539e6
MD5 59aed2b56692440215cef03771f75174
SHA1 c186c8598ca0fe964c265213dcf060ed782883b9
SHA512 32b53286031cfaa7915dbabff39ab08491b16cfd80dbc89379ec948e3fbf6121c1caef7a0ee64c56747102ec0ea06b767aec1c7439fdec181e5e1a363e83ff6b
SSDEEP 12288:RW1ip1iWqmPqIE2QZZ7jOwZY/GnrHPPy:RW1Ci6bE2QP7jOkYyjn
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34400

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

DdeQueryNextServer

kernel32

LoadLibraryExW CreateFileW FreeConsole GetModuleHandleW MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW HeapSize RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress WriteConsoleW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap ReadConsoleW

Sharing