Doge860[.]exe | Triage™

General

Target
Doge860.exe
Size 307KB
Sample230522-hccgeshc71
SHA256 456f100fa1e38ed580c92e324c9dde6fd11a159dcd3efe4de8d54868de4ce83c
MD5 3d3d13f1b2c6a21e6a46e771219a7000
SHA1 0562a772c2588075ebde3a209851c0475d620d69
SHA512 c13e113b87d7492f05cd3115f56230311940a8020bc22dfbbe5b33d184bc58f8265c66910c23e4a77c7efb16a34f2604ad812e79fa1a4550c3186d867df6b534
SSDEEP 6144:yJPZROllAfDq3TqozelOdWMNgXN3167hljbVHOBHEB45IN5f:yZZRO4fSuooOdWMNCNlk1HaHdy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Doge860.exe

File Explorer

Doge860.exe

.exe 307KB

Doge860.exe

IMPHASH 97d476407c8713e8d8094dcaf80101c6
SHA256 456f100fa1e38ed580c92e324c9dde6fd11a159dcd3efe4de8d54868de4ce83c
MD5 3d3d13f1b2c6a21e6a46e771219a7000
SHA1 0562a772c2588075ebde3a209851c0475d620d69
SHA512 c13e113b87d7492f05cd3115f56230311940a8020bc22dfbbe5b33d184bc58f8265c66910c23e4a77c7efb16a34f2604ad812e79fa1a4550c3186d867df6b534
SSDEEP 6144:yJPZROllAfDq3TqozelOdWMNgXN3167hljbVHOBHEB45IN5f:yZZRO4fSuooOdWMNCNlk1HaHdy
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30210

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SearchPathW EnumCalendarInfoA GetDriveTypeW GlobalCompact GetConsoleAliasExesLengthA InterlockedIncrement InterlockedDecrement HeapFree InterlockedCompareExchange OpenSemaphoreA FreeEnvironmentStringsA GetTickCount GetSystemTimeAsFileTime EnumTimeFormatsA SetProcessPriorityBoost GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA LoadLibraryW InitAtomTable MultiByteToWideChar GetStringTypeExA GetProfileIntA DeleteFiber GetLastError GetCurrentDirectoryW GetProcAddress CreateJobSet RemoveDirectoryA SetComputerNameA GetLocalTime WriteConsoleA InterlockedExchangeAdd SetCalendarInfoW AddAtomW SetFileApisToANSI GetModuleFileNameA FindFirstVolumeMountPointA CreateIoCompletionPort GetModuleHandleA lstrcatW FreeEnvironmentStringsW FindNextFileW CompareStringA FileTimeToLocalFileTime GetVolumeNameForVolumeMountPointW DeleteFileW MoveFileWithProgressW GetFileInformationByHandle EnumSystemLocalesW CreateFileW SetStdHandle WriteConsoleW CloseHandle EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW GetCPInfo HeapCreate UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetLocaleInfoW IsProcessorFeaturePresent HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer DeleteFileA

user32

GetDlgCtrlID

winhttp

WinHttpGetProxyForUrl

Sharing