file[.]exe | Triage™

General

Target
file.exe
Size 400KB
Sample230508-he7qcabb21
SHA256 08424055881f85eef71b6e252b91ba305ec887913828ffc024e579ed1ea57d8d
MD5 17d6f36945e41fc06e527f128e837ced
SHA1 b373e2c9146f0636c1403cb18bda392a77cd945b
SHA512 6dd97083cb59a7ba6903f1947662e29c2c2bdc48e4a952402354b40aaede6d237dca6be4710e81ef95b08e6fc5821f19df099b08264788943dee89e80c3ee4d8
SSDEEP 6144:OeBdzgCBDuBv9PKUiPkK9MFriq0AvvcS0Sfp8iA:OmdzgCBqBv9PKnkM4r9cSX8d
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 400KB

file.exe

IMPHASH d5316530de8caf207058f054d9fc1dc3
SHA256 08424055881f85eef71b6e252b91ba305ec887913828ffc024e579ed1ea57d8d
MD5 17d6f36945e41fc06e527f128e837ced
SHA1 b373e2c9146f0636c1403cb18bda392a77cd945b
SHA512 6dd97083cb59a7ba6903f1947662e29c2c2bdc48e4a952402354b40aaede6d237dca6be4710e81ef95b08e6fc5821f19df099b08264788943dee89e80c3ee4d8
SSDEEP 6144:OeBdzgCBDuBv9PKUiPkK9MFriq0AvvcS0Sfp8iA:OmdzgCBqBv9PKnkM4r9cSX8d
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

38656

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalFix GetDriveTypeW GetConsoleAliasExesLengthA InterlockedIncrement SystemTimeToFileTime EnumCalendarInfoW SetDefaultCommConfigW GetUserDefaultLCID MoveFileWithProgressA GetTickCount ReadConsoleW TzSpecificLocalTimeToSystemTime SetHandleCount AllocateUserPhysicalPages GetPrivateProfileIntA AddRefActCtx SetFileShortNameW LoadLibraryW IsProcessInJob GetCalendarInfoW FreeConsole InterlockedPopEntrySList GetFileAttributesW CreateFileW GetOverlappedResult CompareStringW GetVolumePathNameA GetStringTypeExA EnumSystemLocalesA GetProfileIntA ReleaseActCtx GetCurrentDirectoryW SetLastError GetProcAddress VerLanguageNameA SetComputerNameA SearchPathA GetTempFileNameA LoadLibraryA WriteConsoleA LocalAlloc MoveFileA FindFirstVolumeMountPointW RemoveDirectoryW BeginUpdateResourceA AddAtomA GlobalWire GetModuleFileNameA EnumDateFormatsA GetModuleHandleA SetLocaleInfoW lstrcatW FreeEnvironmentStringsW FindNextFileW GetConsoleTitleW EnumDateFormatsW SetCalendarInfoA SetThreadAffinityMask GetVolumeNameForVolumeMountPointW DeleteFileW DebugBreak GetProfileSectionW EnumSystemLocalesW AreFileApisANSI InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId CloseHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetEnvironmentStringsW GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA IsValidLocale GetStringTypeW HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleW DeleteFileA

Sharing