file[.]exe | Triage™

General

Target
file.exe
Size 372KB
Sample230521-av65rafc87
SHA256 9aa24f45e364a29eb92748cfc1e318beceb909fa19b5b5dfe043a495fc5fd2d2
MD5 e9b27f55a18054d5c54dd5d55d3b2264
SHA1 f87ff8c75ccb481931c4ea16af5bdcb7bdebf27e
SHA512 ca470b2ff8f8ad10cec12ee283ac0c92e9183feb3e9df61b488af3a4e7f0932ab445365afb00860dcd4c8a7783c4b745a26d559bfeb36154f358e3d359baf8c1
SSDEEP 6144:gm9PdTaA/YfDsrl72WirgYYKZqVBrhNQcYjBVAGZv5gTz:g+duCplTirgvGArLQ1jAGdSz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 372KB

file.exe

IMPHASH dc368f441a884fce22ecc585e2bd5326
SHA256 9aa24f45e364a29eb92748cfc1e318beceb909fa19b5b5dfe043a495fc5fd2d2
MD5 e9b27f55a18054d5c54dd5d55d3b2264
SHA1 f87ff8c75ccb481931c4ea16af5bdcb7bdebf27e
SHA512 ca470b2ff8f8ad10cec12ee283ac0c92e9183feb3e9df61b488af3a4e7f0932ab445365afb00860dcd4c8a7783c4b745a26d559bfeb36154f358e3d359baf8c1
SSDEEP 6144:gm9PdTaA/YfDsrl72WirgYYKZqVBrhNQcYjBVAGZv5gTz:g+duCplTirgvGArLQ1jAGdSz
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39917

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetLocaleInfoA GetDefaultCommConfigW GetCommState InterlockedDecrement GetLogicalDriveStringsW CancelWaitableTimer SetEvent GetProcessPriorityBoost GetModuleHandleW GetConsoleTitleA ReadConsoleW GetWindowsDirectoryA InitializeCriticalSection GlobalAlloc FatalAppExitW IsBadCodePtr GetSystemWindowsDirectoryA GetVersionExW GlobalFlags DnsHostnameToComputerNameW FindNextVolumeW GetConsoleAliasW ReplaceFileW IsDBCSLeadByte GetModuleFileNameW CreateActCtxA GetTempPathW lstrlenA CreateJobObjectA OpenMutexW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress AttachConsole VirtualAlloc SetComputerNameA GetTempFileNameA LoadLibraryA InterlockedExchangeAdd CreateFileMappingW OpenEventA FindAtomA GetTapeParameters FindFirstVolumeMountPointA FindFirstChangeNotificationA GetConsoleTitleW GetConsoleCursorInfo WaitForDebugEvent ScrollConsoleScreenBufferA AddConsoleAliasA EnumCalendarInfoExA EnumSystemLocalesW SetThreadContext SetProcessAffinityMask GetDateFormatW GetStringTypeExA WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW HeapCreate VirtualFree HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetModuleHandleA

user32

CharLowerBuffW

gdi32

GetCharABCWidthsFloatW GetCharWidthW EnumFontsW

Sharing