file[.]exe | Triage™

General

Target
file.exe
Size 311KB
Sample230509-affz1sdd97
SHA256 552fba4dc6da172a89fa1598a1bd3c62ad0ae663faf6548987999f3649144d2b
MD5 0b3392b5fb32e3f4bc370d033d669d89
SHA1 83ac3d4c91f79ebcfe0a216b069c4e5653bc13f9
SHA512 1a8a4df8e502659093248994eef9c755a17d9bb1afbf612d8a89b190c8e31e1fc9252ee6a520d40e63c7546729cd4409ea99a7fef2b737f6bc3d81f48dc6679b
SSDEEP 6144:x+gQlK1IptSjtNNvS2CfdDGOUfREi9ic:x+gQA1yWlCVd2RjY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 311KB

file.exe

IMPHASH 8effd33c0c7d3209e4d0dde05803b13b
SHA256 552fba4dc6da172a89fa1598a1bd3c62ad0ae663faf6548987999f3649144d2b
MD5 0b3392b5fb32e3f4bc370d033d669d89
SHA1 83ac3d4c91f79ebcfe0a216b069c4e5653bc13f9
SHA512 1a8a4df8e502659093248994eef9c755a17d9bb1afbf612d8a89b190c8e31e1fc9252ee6a520d40e63c7546729cd4409ea99a7fef2b737f6bc3d81f48dc6679b
SSDEEP 6144:x+gQlK1IptSjtNNvS2CfdDGOUfREi9ic:x+gQA1yWlCVd2RjY
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20791

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ScrollConsoleScreenBufferW QueryPerformanceCounter GetUserDefaultLCID SetConsoleScreenBufferSize InterlockedCompareExchange AddConsoleAliasW GetModuleHandleW EnumCalendarInfoExW ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GlobalAlloc LoadLibraryW GetVersionExW GetFileAttributesA HeapQueryInformation GetMailslotInfo GetStringTypeExA CreateJobObjectA EnumSystemLocalesA GetProfileIntA GetLastError InterlockedFlushSList GetProcAddress VirtualAlloc WaitNamedPipeA BackupWrite SetFirmwareEnvironmentVariableW RemoveDirectoryA CopyFileA CreateSemaphoreW WritePrivateProfileStringA MoveFileA AddAtomW BeginUpdateResourceA PostQueuedCompletionStatus WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleHandleA FreeEnvironmentStringsW VirtualProtect OpenEventW GetShortPathNameW GetCPInfoExA GetVersionExA GetConsoleProcessList DebugBreak HeapSize InterlockedIncrement MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree RaiseException WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc

user32

CharLowerBuffW

gdi32

GetBrushOrgEx GetCharWidthI

Sharing