pr923071[.]exe | Triage™

General

Target
pr923071.exe
Size 405KB
Sample230513-2wtplahg92
SHA256 e5a1db0d5caeb1d7661ae6e7f1b5708dd8797708490abf45bf759f2ab060ba52
MD5 3bad98a281a91da6db58e85316ce1a02
SHA1 443480c0b2787a6e31966e0aa468c3893d055049
SHA512 fbd9310340d64716968419de2c27b661761c01989f03866c15dbb8e3d87f40fa08adf139ca954dfd21a2a5f71254cabf7675771a80486fbb1d133eb158aaad3b
SSDEEP 6144:oQWwbRayvL6xJxnl8A9vI+fOcR7v+NyjhAfKtTk:zWwMyz6xJxl80vI+fOcRT+NkOfKtTk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pr923071.exe

File Explorer

pr923071.exe

.exe 405KB

pr923071.exe

IMPHASH fbf38be229d20d77768926d92d23ad3e
SHA256 e5a1db0d5caeb1d7661ae6e7f1b5708dd8797708490abf45bf759f2ab060ba52
MD5 3bad98a281a91da6db58e85316ce1a02
SHA1 443480c0b2787a6e31966e0aa468c3893d055049
SHA512 fbd9310340d64716968419de2c27b661761c01989f03866c15dbb8e3d87f40fa08adf139ca954dfd21a2a5f71254cabf7675771a80486fbb1d133eb158aaad3b
SSDEEP 6144:oQWwbRayvL6xJxnl8A9vI+fOcR7v+NyjhAfKtTk:zWwMyz6xJxl80vI+fOcRT+NkOfKtTk
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

41731

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalCompact GetConsoleAliasA InterlockedDecrement GetEnvironmentStringsW SetComputerNameW GetTickCount FindNextVolumeMountPointA GetConsoleAliasesLengthA GetDriveTypeA GetVolumePathNameW GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW IsProcessInJob GetConsoleAliasExesLengthW GetTapePosition GetFileAttributesW GetModuleFileNameW GetStringTypeExA GetNamedPipeHandleStateW GetProcAddress CreateJobSet EnumCalendarInfoA UnhandledExceptionFilter BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW RemoveDirectoryW BeginUpdateResourceA SetThreadIdealProcessor FindAtomA EnumResourceTypesW GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW WaitForDebugEvent SetCalendarInfoA SetFileShortNameA DeleteFileW GetConsoleProcessList InterlockedPushEntrySList EnumSystemLocalesW CreateFileW WriteConsoleW FlushFileBuffers Process32FirstW CreateMutexW GetConsoleMode SetStdHandle InterlockedIncrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy GetModuleHandleW ExitProcess WriteFile GetStdHandle SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc SetConsoleCtrlHandler FreeLibrary DeleteFileA

user32

DefDlgProcA GetMenuBarInfo

advapi32

ReportEventW

shell32

FindExecutableA

Sharing