file[.]exe | Triage™

General

Target
file.exe
Size 405KB
Sample230508-e7nw6aag7v
SHA256 37b8387d3e126e057247e99ae3d0e0fcce3c0013ac1d1442cc1dae21eb3d15ab
MD5 f03c5a8db0692c724cc4f3568d25e062
SHA1 23f5017f7aee63427f6ef2cb8552e17d3047ad0b
SHA512 41623deaefb91900c24b34065dbe38c7c7edbdf885224c7f721296135baa9dffad3e2161a0c51d7184f3dfca975ff5a68db1985cb705d5b5f556e41dc925d00b
SSDEEP 6144:5otNG6L4m446Lw6/m+RS67SplQIjPVYfvd9RYGSbHc3ZBh/R6oV53XcS:5o/l4fw63RS67ClNOflbYP8Lh3J
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 405KB

file.exe

IMPHASH 09ad811c7b24c560499d47bd7c66a41b
SHA256 37b8387d3e126e057247e99ae3d0e0fcce3c0013ac1d1442cc1dae21eb3d15ab
MD5 f03c5a8db0692c724cc4f3568d25e062
SHA1 23f5017f7aee63427f6ef2cb8552e17d3047ad0b
SHA512 41623deaefb91900c24b34065dbe38c7c7edbdf885224c7f721296135baa9dffad3e2161a0c51d7184f3dfca975ff5a68db1985cb705d5b5f556e41dc925d00b
SSDEEP 6144:5otNG6L4m446Lw6/m+RS67SplQIjPVYfvd9RYGSbHc3ZBh/R6oV53XcS:5o/l4fw63RS67ClNOflbYP8Lh3J
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32957

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDefaultCommConfigW SetWaitableTimer ReadConsoleA GetConsoleAliasA GetCurrentActCtx GetSystemWindowsDirectoryW QueryDosDeviceA GetProfileStringW WaitForSingleObject CancelWaitableTimer AddConsoleAliasW GetModuleHandleW EnumCalendarInfoExW IsBadReadPtr GetNumberFormatA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA EnumTimeFormatsW CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetCalendarInfoA HeapCreate FindNextVolumeW Beep WriteConsoleW ReplaceFileW GetModuleFileNameW lstrlenW GlobalUnlock GetConsoleAliasesW lstrlenA GetLongPathNameW GetProcAddress VirtualAlloc CreateConsoleScreenBuffer BeginUpdateResourceW SetComputerNameA LoadLibraryA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW IsSystemResumeAutomatic RemoveDirectoryW WriteProfileSectionW AddAtomA SetConsoleCursorInfo GetModuleHandleA GetConsoleTitleW EnumDateFormatsW GetShortPathNameW GetDiskFreeSpaceExW FindAtomW GetWindowsDirectoryW DeleteTimerQueueTimer GetConsoleSelectionInfo EnumSystemLocalesW CreateFileA CloseHandle GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers SetProcessAffinityMask GetTempFileNameW GetComputerNameA GetLastError GetConsoleMode InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapAlloc MultiByteToWideChar GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent VirtualFree HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte LCMapStringW SetFilePointer GetConsoleCP

user32

SetCaretPos ToAsciiEx ChangeMenuW SetParent CreateAcceleratorTableW GetClassInfoExW GetWindowLongA GetSysColorBrush

gdi32

GetCharABCWidthsFloatW GetCharWidthA GetColorAdjustment

winhttp

WinHttpOpen

Sharing