pr958418[.]exe | Triage™

General

Target
pr958418.exe
Size 269KB
Sample230513-2wtplacb4x
SHA256 f84ffb84da77d2490879c35ff94064e341a6b0a0306e2bf636039e87c913b43d
MD5 18975c491caeaba286d9aaf9f798483a
SHA1 527fa65ba407177e2432489587752c4071572807
SHA512 2625a9d19451c8e5db8c6d356e2cb2e6be02603e00e7b58076f8dbbf82bfd06d894d538cd1dddb1bf74223489f5ac1d261c60d6c3729b56395a289e7a3801138
SSDEEP 3072:KusW2zNnkvs6LpttjzHcHg6QxfLYyqshilCecIIYgPczDkP33G5VIhGF:KNnkU6bCv6fdXhilCtI+PeeniIM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pr958418.exe

File Explorer

pr958418.exe

.exe 269KB

pr958418.exe

IMPHASH c36577d8970592a39f985677fb550958
SHA256 f84ffb84da77d2490879c35ff94064e341a6b0a0306e2bf636039e87c913b43d
MD5 18975c491caeaba286d9aaf9f798483a
SHA1 527fa65ba407177e2432489587752c4071572807
SHA512 2625a9d19451c8e5db8c6d356e2cb2e6be02603e00e7b58076f8dbbf82bfd06d894d538cd1dddb1bf74223489f5ac1d261c60d6c3729b56395a289e7a3801138
SSDEEP 3072:KusW2zNnkvs6LpttjzHcHg6QxfLYyqshilCecIIYgPczDkP33G5VIhGF:KNnkU6bCv6fdXhilCtI+PeeniIM
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19614

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddConsoleAliasW GetProcessPriorityBoost GetModuleHandleW GetConsoleAliasesLengthA GetWindowsDirectoryA EnumTimeFormatsA GetDateFormatA TzSpecificLocalTimeToSystemTime EnumResourceTypesA SetHandleCount TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW SetConsoleCP FindNextVolumeW GetConsoleAliasW GlobalUnfix GetCPInfoExW GetCurrentDirectoryW SetLastError GetProcAddress HeapSize BeginUpdateResourceW WriteProfileSectionA SetThreadPriorityBoost LoadLibraryA WriteConsoleA InterlockedExchangeAdd WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect TlsAlloc AddConsoleAliasA DebugBreak EnumCalendarInfoExA GetModuleHandleA VerSetConditionMask VirtualAlloc lstrlenA HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing