file[.]exe | Triage™

General

Target
file.exe
Size 277KB
Sample230518-eynj2agg3x
SHA256 20ef00653ebb1bb1c83536be60b700e6958b17ba21fadfcd1c1d7b2ad93cc2a9
MD5 2f3a3162c7aa84c091eb1245ee5b3584
SHA1 fe1a38dce6dd9b05b6b8fd9fa010facb274c97b7
SHA512 c620c893634ae17015ffceab725122a4e9405353c5ff127e2d7856d3ac2f35a48735abab7a76d9abe7e8f34a5c974433bc663849235b55f7f713b4b2b8cc89ca
SSDEEP 3072:rpKA/XMRfVBY/6e0rO22SIrPsHhPoDTcjR/4K239hWCI5iQeL/+PAWd12zjYtbvs:oYMTW0rZ2S+ghPofcjRtGhYxumc1N
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 277KB

file.exe

IMPHASH 7d09af4f4de799f652c0bd662bf75a46
SHA256 20ef00653ebb1bb1c83536be60b700e6958b17ba21fadfcd1c1d7b2ad93cc2a9
MD5 2f3a3162c7aa84c091eb1245ee5b3584
SHA1 fe1a38dce6dd9b05b6b8fd9fa010facb274c97b7
SHA512 c620c893634ae17015ffceab725122a4e9405353c5ff127e2d7856d3ac2f35a48735abab7a76d9abe7e8f34a5c974433bc663849235b55f7f713b4b2b8cc89ca
SSDEEP 3072:rpKA/XMRfVBY/6e0rO22SIrPsHhPoDTcjR/4K239hWCI5iQeL/+PAWd12zjYtbvs:oYMTW0rZ2S+ghPofcjRtGhYxumc1N
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33844

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SearchPathW EnumCalendarInfoA GetDriveTypeW GetProfileIntW GetConsoleAliasExesLengthA InterlockedIncrement InterlockedDecrement HeapFree SetVolumeMountPointW FreeEnvironmentStringsA MoveFileWithProgressA GetTickCount GetSystemTimeAsFileTime EnumTimeFormatsA GetUserDefaultLangID SetProcessPriorityBoost GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA AddRefActCtx WideCharToMultiByte LoadLibraryW IsProcessInJob GetCalendarInfoA InitAtomTable GetFileAttributesW CreateFileW CompareStringW GetStringTypeExA EnumSystemLocalesA GetCurrentDirectoryW SetLastError GetProcAddress SetComputerNameA WriteConsoleA SetCalendarInfoW AddAtomW RemoveDirectoryW SetFileApisToANSI BeginUpdateResourceA GetModuleFileNameA FindFirstVolumeMountPointA CreateIoCompletionPort GetModuleHandleA lstrcatW FreeEnvironmentStringsW FindNextFileW FileTimeToLocalFileTime GetVolumeNameForVolumeMountPointW DeleteFileW WriteConsoleW CloseHandle EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle

user32

DefDlgProcW

Sharing