file[.]exe | Triage™

General

Target
file.exe
Size 353KB
Sample230515-rad2xaff98
SHA256 4ad18e97811de81cfe2a3051d49ccc86cdd6bc03db21081edbcdfbadd68e58b3
MD5 88862a7d2f23f62556c9f4a8f26ec5e1
SHA1 600e11c64f9f95272bf885f836985fa6506971c7
SHA512 fec9741fe99afb1129a1d7fd909728290f27348eec289785f75a8217fc4ca0a8c691c8d1b110f0d3694435f180ccde490853d2144ad651290c5414ec877ce69d
SSDEEP 6144:Jxii46wE3w54S+phvkHX/s6Y7Jn2vklfaYMXli7RWhENTY7MZ:Dii4L8+4eHX/sr7Jn2vkYYt7VSY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 353KB

file.exe

IMPHASH b597d3113bd8ad41b7615fb89c9da92e
SHA256 4ad18e97811de81cfe2a3051d49ccc86cdd6bc03db21081edbcdfbadd68e58b3
MD5 88862a7d2f23f62556c9f4a8f26ec5e1
SHA1 600e11c64f9f95272bf885f836985fa6506971c7
SHA512 fec9741fe99afb1129a1d7fd909728290f27348eec289785f75a8217fc4ca0a8c691c8d1b110f0d3694435f180ccde490853d2144ad651290c5414ec877ce69d
SSDEEP 6144:Jxii46wE3w54S+phvkHX/s6Y7Jn2vklfaYMXli7RWhENTY7MZ:Dii4L8+4eHX/sr7Jn2vkYYt7VSY
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34267

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA SearchPathW EnumCalendarInfoA GetDriveTypeW AllocConsole GetProfileIntW GetConsoleAliasExesLengthA InterlockedIncrement ReadConsoleA InterlockedDecrement GetProfileSectionA SetVolumeMountPointW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetSystemTimeAsFileTime EnumTimeFormatsA GlobalAlloc GetPrivateProfileIntA AddRefActCtx LoadLibraryW IsProcessInJob GetCalendarInfoA GetStringTypeExW GetFileAttributesA GetModuleFileNameW CreateFileW GetOverlappedResult CompareStringW GetVolumePathNameA EnumSystemLocalesA GetCurrentDirectoryW SetLastError GetProcAddress HeapSize MoveFileW RemoveDirectoryA SetComputerNameA GetTempFileNameA SetFileApisToOEM WriteConsoleA BeginUpdateResourceA AddAtomA FindNextFileA FindFirstVolumeMountPointA GetModuleHandleA lstrcatW FreeEnvironmentStringsW WaitForDebugEvent SetCalendarInfoA SetThreadAffinityMask FileTimeToLocalFileTime GetVolumeNameForVolumeMountPointW DeleteAtom MoveFileWithProgressW DeleteFileA EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleW SetStdHandle

Sharing