file[.]exe | Triage™

General

Target
file.exe
Size 347KB
Sample230515-vhdynage56
SHA256 e7c9c79948e5fca5447d4dde753f80ac4c7345361b9556aa0dfea061bdbbd94d
MD5 e4e2779dcccc9834770a960d1e6d06fe
SHA1 2bccac65737fcc34674e4054483bf22eaa724dd0
SHA512 f758b41f3b319026e00a10f87690edd3ca251b75dfe8f7b07fcf6959209172b145ef4086b2a045bc24156b7e455ea332850147ec8963e3a6772cf5e01f60639d
SSDEEP 6144:tsx5dRRdRYMDI+HkC3q0jhEejvk3pnAx4t+kIJos3UY7MZ:t65dRRdCl+HkC/rjQpnAx4tfIJH3HY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 347KB

file.exe

IMPHASH e9c458cdd2bf4d052566046ce5f2e6b7
SHA256 e7c9c79948e5fca5447d4dde753f80ac4c7345361b9556aa0dfea061bdbbd94d
MD5 e4e2779dcccc9834770a960d1e6d06fe
SHA1 2bccac65737fcc34674e4054483bf22eaa724dd0
SHA512 f758b41f3b319026e00a10f87690edd3ca251b75dfe8f7b07fcf6959209172b145ef4086b2a045bc24156b7e455ea332850147ec8963e3a6772cf5e01f60639d
SSDEEP 6144:tsx5dRRdRYMDI+HkC3q0jhEejvk3pnAx4t+kIJos3UY7MZ:t65dRRdCl+HkC/rjQpnAx4tfIJH3HY
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34347

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA SearchPathW EnumCalendarInfoA GetDriveTypeW AllocConsole GetProfileIntW GetConsoleAliasExesLengthA ReadConsoleA InterlockedDecrement GetProfileSectionA SetVolumeMountPointW GetSystemDefaultLCID FreeEnvironmentStringsA MoveFileWithProgressA GetModuleHandleW GetTickCount GetSystemTimeAsFileTime EnumTimeFormatsA ActivateActCtx GetPrivateProfileIntA AddRefActCtx LoadLibraryW IsProcessInJob GetCalendarInfoA GetStringTypeExW GetFileAttributesA GetModuleFileNameW CreateFileW GetOverlappedResult CompareStringW GetVolumePathNameA EnumSystemLocalesA GetCurrentDirectoryW SetLastError GetProcAddress HeapSize MoveFileW SetComputerNameA GetTempFileNameA SetFileApisToOEM WriteConsoleA LocalAlloc RemoveDirectoryW BeginUpdateResourceA AddAtomA FindNextFileA FindFirstVolumeMountPointA GetModuleHandleA lstrcatW FreeEnvironmentStringsW WaitForDebugEvent SetCalendarInfoA SetThreadAffinityMask FileTimeToLocalFileTime GetVolumeNameForVolumeMountPointW DeleteFileW DeleteAtom DeleteFileA InterlockedIncrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleW SetStdHandle

Sharing