file[.]exe | Triage™

General

Target
file.exe
Size 409KB
Sample230512-ng5awsfa8z
SHA256 cd4770d4203ebb6ba64f86cebc1dc41e73eedd471ba798f4d430f61dc1e91be2
MD5 1d34c3fae5d2b8199b6e99150950e72d
SHA1 10d512930cf13d7a748aee52eccfe616024d02b8
SHA512 8aa19f269ffda90ed84735533b2c24f40faf059dd9c66752ececdd018c25ebd65dbaee5770f8a12ce5f7ca000c0fccecde274d5523667a365c21fe9cf58d6006
SSDEEP 6144:mzR2+afy3WqYy4Iu7bJIbHKXku0uWoTFxQZknQ0:y9afyxYytu7ibHKUiV/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 409KB

file.exe

IMPHASH 97769160e0476607e512035fc540061b
SHA256 cd4770d4203ebb6ba64f86cebc1dc41e73eedd471ba798f4d430f61dc1e91be2
MD5 1d34c3fae5d2b8199b6e99150950e72d
SHA1 10d512930cf13d7a748aee52eccfe616024d02b8
SHA512 8aa19f269ffda90ed84735533b2c24f40faf059dd9c66752ececdd018c25ebd65dbaee5770f8a12ce5f7ca000c0fccecde274d5523667a365c21fe9cf58d6006
SSDEEP 6144:mzR2+afy3WqYy4Iu7bJIbHKXku0uWoTFxQZknQ0:y9afyxYytu7ibHKUiV/
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35206

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GlobalFix SetDefaultCommConfigA EnumCalendarInfoA AllocConsole GetProfileIntW InterlockedIncrement GetProfileSectionA GetUserDefaultLCID GetTickCount GetSystemTimeAsFileTime GetConsoleTitleA ReadConsoleW TzSpecificLocalTimeToSystemTime GetDriveTypeA GlobalAlloc LoadLibraryW IsProcessInJob GetCalendarInfoW SetVolumeMountPointA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW SetSystemPowerState GetModuleFileNameW CreateFileW GetVolumePathNameA GetStringTypeExA GetPrivateProfileIntW ReleaseActCtx GetCurrentDirectoryW SetLastError GetProcAddress MoveFileW RemoveDirectoryA SetComputerNameA SearchPathA GetTempFileNameA SetFileApisToOEM LoadLibraryA SetCalendarInfoW FindFirstVolumeMountPointW BeginUpdateResourceA AddAtomA GlobalWire FindNextFileA CreateIoCompletionPort GetModuleHandleA lstrcatW FreeEnvironmentStringsW EnumDateFormatsW CompareStringA WaitForDebugEvent SetThreadAffinityMask FileTimeToLocalFileTime DeleteAtom MoveFileWithProgressW EnumSystemLocalesW DeleteFileA InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetLocaleInfoW WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle SetStdHandle

Sharing