file[.]exe | Triage™

General

Target
file.exe
Size 701KB
Sample230511-qcmldsfc3w
SHA256 03042961ebc91064d7e9da04ba292158b34656bf7a05bc868c8f478efa0247df
MD5 2d86108e95809333696cdc40549c4a6a
SHA1 b269a5d0fbdd16ea0b091edd9a518b35c3f63132
SHA512 91ff6c84e516fc8f96999e1d727f7c74ed392a8ef8f5464fc133d18e41ecf7b521bb5ba51d1d329d0dcd491c2dc2f122457e007d3b73493eb05445c6d9ecdb93
SSDEEP 12288:T/ss9xcGO0+EBx/qVHyd4wqNnlXzP0qf73knC1xciP894:Th9GGmE4a4HPX4qAnC1BP894
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 701KB

file.exe

IMPHASH 796ee4764b976b073ef697d148f4671b
SHA256 03042961ebc91064d7e9da04ba292158b34656bf7a05bc868c8f478efa0247df
MD5 2d86108e95809333696cdc40549c4a6a
SHA1 b269a5d0fbdd16ea0b091edd9a518b35c3f63132
SHA512 91ff6c84e516fc8f96999e1d727f7c74ed392a8ef8f5464fc133d18e41ecf7b521bb5ba51d1d329d0dcd491c2dc2f122457e007d3b73493eb05445c6d9ecdb93
SSDEEP 12288:T/ss9xcGO0+EBx/qVHyd4wqNnlXzP0qf73knC1xciP894:Th9GGmE4a4HPX4qAnC1BP894
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32382

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileStringW WaitForSingleObject CancelWaitableTimer AddConsoleAliasW GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA EnumTimeFormatsA EnumTimeFormatsW CreateActCtxW SetProcessPriorityBoost GetCalendarInfoA GetSystemWindowsDirectoryA HeapCreate DnsHostnameToComputerNameW FindNextVolumeW GetConsoleAliasW Beep SetConsoleCursorPosition GetModuleFileNameW GetConsoleFontSize lstrlenW ReplaceFileA GlobalUnlock GetConsoleAliasesW GetLastError GetProcAddress ReadConsoleA CreateConsoleScreenBuffer BeginUpdateResourceW WriteProfileSectionA RemoveDirectoryA SetComputerNameA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc IsSystemResumeAutomatic QueryDosDeviceW AddAtomA FindFirstVolumeMountPointA GetModuleHandleA GetConsoleTitleW EnumDateFormatsW GetConsoleCursorInfo GetShortPathNameW GetDiskFreeSpaceExA FindAtomW GetWindowsDirectoryW DeleteTimerQueueTimer AddConsoleAliasA EnumSystemLocalesW CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP SetStdHandle GetDefaultCommConfigW SetProcessAffinityMask VirtualAlloc GetTempFileNameW FlushFileBuffers InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapAlloc MultiByteToWideChar GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent SetHandleCount GetStdHandle GetFileType GetStartupInfoA VirtualFree HeapReAlloc ExitProcess WriteFile GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW

user32

SetParent ToAsciiEx ChangeMenuW GetClassInfoExA GetWindowLongA CreateAcceleratorTableA GetSysColorBrush

gdi32

GetCharWidthA SetColorAdjustment GetCharABCWidthsFloatW

winhttp

WinHttpOpen

Sharing