file[.]exe | Triage™

General

Target
file.exe
Size 319KB
Sample230510-rylrnaac2z
SHA256 d48a2b8410a53d0f6475fa8f93ef357ab2fbfe21a9b56af60ac3aa73cd4c1078
MD5 6ade942d85d1738a7d52360ca1d34080
SHA1 259fdeb6f82d0720d23d5b37b9f03d0bb7474a6f
SHA512 362601cc669fd23210c05a73274ee0c6d5b1f1fc797dec66b567526727cc78de40b001e6db696c8e19645598673c14b513564b90d3a8b00c9ed97898f85f697c
SSDEEP 6144:7AlTLATq+/lVkvYIfTWVKAag6K5vIV6DvGG4+:7q0Tq+xWaVK7OIVQvG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 319KB

file.exe

IMPHASH e48ce786839b8555216670df4b01894b
SHA256 d48a2b8410a53d0f6475fa8f93ef357ab2fbfe21a9b56af60ac3aa73cd4c1078
MD5 6ade942d85d1738a7d52360ca1d34080
SHA1 259fdeb6f82d0720d23d5b37b9f03d0bb7474a6f
SHA512 362601cc669fd23210c05a73274ee0c6d5b1f1fc797dec66b567526727cc78de40b001e6db696c8e19645598673c14b513564b90d3a8b00c9ed97898f85f697c
SSDEEP 6144:7AlTLATq+/lVkvYIfTWVKAag6K5vIV6DvGG4+:7q0Tq+xWaVK7OIVQvG
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33086

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleA GetSystemWindowsDirectoryW GetProfileStringW WaitForSingleObject CancelWaitableTimer AddConsoleAliasW GetModuleHandleW EnumCalendarInfoExW IsBadReadPtr GetConsoleAliasesLengthA GetNumberFormatA EnumTimeFormatsA EnumTimeFormatsW CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetCalendarInfoA SetSystemTimeAdjustment HeapCreate WritePrivateProfileStructW FindNextVolumeW GetConsoleAliasW Beep SetConsoleCursorPosition WriteConsoleW GetModuleFileNameW lstrlenW ReplaceFileA GlobalUnlock GetConsoleAliasesW GetLastError GetDefaultCommConfigW GetProcAddress VirtualAlloc CreateConsoleScreenBuffer BeginUpdateResourceW RemoveDirectoryA SetComputerNameA LoadLibraryA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW IsSystemResumeAutomatic QueryDosDeviceW WriteProfileSectionW AddAtomA GetModuleHandleA GetConsoleTitleW EnumDateFormatsW GetConsoleCursorInfo GetShortPathNameW GetDiskFreeSpaceExA FindAtomW GetWindowsDirectoryW DeleteTimerQueueTimer GetConsoleSelectionInfo EnumSystemLocalesW CreateFileA CloseHandle GetConsoleOutputCP WriteConsoleA SetStdHandle SetProcessAffinityMask GetTempFileNameW GetLongPathNameW GetComputerNameA FlushFileBuffers InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapAlloc MultiByteToWideChar GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent SetHandleCount GetStdHandle GetFileType GetStartupInfoA VirtualFree HeapReAlloc ExitProcess WriteFile GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW

user32

GetSysColorBrush ToAsciiEx ChangeMenuW GetClassInfoExA SetParent CreateAcceleratorTableA GetWindowLongA

gdi32

GetCharWidthA SetColorAdjustment GetCharABCWidthsFloatW

winhttp

WinHttpOpen

Sharing