file[.]exe | Triage™

General

Target
file.exe
Size 321KB
Sample230517-ge513sch3z
SHA256 9e168c82de9d5a9cfaca738e8a210dc756a6286264b73ef4c5d1ae32f6c25d67
MD5 3c39d71a6bfb9d3aca422276d817e57f
SHA1 7a674cb8db4d2a8ff88f8f8d407e8812ee78757d
SHA512 2c4207dc62d0df58fb9a1d89d575c1e904d1c053517ac88a935c694df7aee6d6f7c31e1a5a0c9aacf00eabbebe8d1773258da05a02b7e6b5c0a8267b31f26d0b
SSDEEP 6144:AwyMow6lOUafyHjikCk9wvWTz5Y7CzYqQg7:Thow607fyHjPCvvWTz/YI7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 321KB

file.exe

IMPHASH 8a42b428b27b020dfbc0510494febce0
SHA256 9e168c82de9d5a9cfaca738e8a210dc756a6286264b73ef4c5d1ae32f6c25d67
MD5 3c39d71a6bfb9d3aca422276d817e57f
SHA1 7a674cb8db4d2a8ff88f8f8d407e8812ee78757d
SHA512 2c4207dc62d0df58fb9a1d89d575c1e904d1c053517ac88a935c694df7aee6d6f7c31e1a5a0c9aacf00eabbebe8d1773258da05a02b7e6b5c0a8267b31f26d0b
SSDEEP 6144:AwyMow6lOUafyHjikCk9wvWTz5Y7CzYqQg7:Thow607fyHjPCvvWTz/YI7
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34651

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA SearchPathW EnumCalendarInfoA GetDriveTypeW AllocConsole GetProfileIntW GetConsoleAliasExesLengthA InterlockedDecrement HeapFree GetProfileSectionA SetVolumeMountPointW FreeEnvironmentStringsA MoveFileWithProgressA GetTickCount GetSystemTimeAsFileTime EnumTimeFormatsA GetUserDefaultLangID GetVolumePathNameW ActivateActCtx GlobalAlloc GetPrivateProfileIntA AddRefActCtx WideCharToMultiByte LoadLibraryW IsProcessInJob GetCalendarInfoA GetFileAttributesW CreateFileW GetOverlappedResult CompareStringW GetStringTypeExA EnumSystemLocalesA GetCurrentDirectoryW SetLastError GetProcAddress SetComputerNameA SetFileApisToOEM WriteConsoleA SetCalendarInfoW AddAtomW RemoveDirectoryW BeginUpdateResourceA GetModuleFileNameA FindFirstVolumeMountPointA GetModuleHandleA lstrcatW FreeEnvironmentStringsW FindNextFileW SetThreadAffinityMask FileTimeToLocalFileTime GetVolumeNameForVolumeMountPointW DeleteFileW DeleteAtom DeleteFileA InterlockedIncrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapSize GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleW SetStdHandle

Sharing