file[.]exe | Triage™

General

Target
file.exe
Size 323KB
Sample230515-xvcbpsfd91
SHA256 cd255ffa7973cee8e0db0cdc9959a616ced95e020a8b92ad503ea309425de033
MD5 abc3887732b42b2c1205bab8308fd696
SHA1 eafe72d8c7df39bbb47a56e87f2a5d3e7fd90fd8
SHA512 bcd3eb98c6d98d118886ad1caf026dc7d659be5a0eaa149601e4eb6b2f1a6875d894ad6cda837faaa8ac419e96793ba0ec260785e318ca44d487c0e664c1243e
SSDEEP 6144:NgBWCEC1rnI6nuUIyDyaWQ7akcyMzJhuIUvgKZ:iBWCEC5fLuaWQ7akcyoUf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 323KB

file.exe

IMPHASH c5a8b227667c5bf1f9b6dfc78dd05c3d
SHA256 cd255ffa7973cee8e0db0cdc9959a616ced95e020a8b92ad503ea309425de033
MD5 abc3887732b42b2c1205bab8308fd696
SHA1 eafe72d8c7df39bbb47a56e87f2a5d3e7fd90fd8
SHA512 bcd3eb98c6d98d118886ad1caf026dc7d659be5a0eaa149601e4eb6b2f1a6875d894ad6cda837faaa8ac419e96793ba0ec260785e318ca44d487c0e664c1243e
SSDEEP 6144:NgBWCEC1rnI6nuUIyDyaWQ7akcyMzJhuIUvgKZ:iBWCEC5fLuaWQ7akcyoUf
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34363

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA SearchPathW EnumCalendarInfoA GetDriveTypeW AllocConsole GetProfileIntW GetConsoleAliasExesLengthA ReadConsoleA InterlockedDecrement GetProfileSectionA SetVolumeMountPointW FreeEnvironmentStringsA MoveFileWithProgressA GetModuleHandleW GetTickCount GetSystemTimeAsFileTime EnumTimeFormatsA GetUserDefaultLangID ActivateActCtx GetPrivateProfileIntA AddRefActCtx LoadLibraryW IsProcessInJob GetCalendarInfoA GetStringTypeExW GetFileAttributesW GetModuleFileNameW CreateFileW GetOverlappedResult CompareStringW GetVolumePathNameA EnumSystemLocalesA GetCurrentDirectoryW SetLastError GetProcAddress HeapSize MoveFileW SetComputerNameA GetTempFileNameA SetFileApisToOEM WriteConsoleA LocalAlloc SetCalendarInfoW RemoveDirectoryW BeginUpdateResourceA AddAtomA FindFirstVolumeMountPointA GetModuleHandleA lstrcatW FreeEnvironmentStringsW FindNextFileW WaitForDebugEvent SetThreadAffinityMask FileTimeToLocalFileTime GetVolumeNameForVolumeMountPointW DeleteFileW DeleteAtom DeleteFileA InterlockedIncrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleW SetStdHandle

Sharing