04846099[.]exe | Triage™

General

Target
04846099.exe
Size 282KB
Sample230526-peatyafd53
SHA256 7054b6754aedc7bd4f95deeaea4bf8be7835ccbd34e777bb9676f1a2e1383090
MD5 30d5ddec9c4ac25fb2f49d50a770cd70
SHA1 a203167ff9298d4f9134a194513731d1d52a9337
SHA512 3e1636bf5f325f2beda9482b1d92b540c184981aec19f13ef17d1b18c69f46fe9e73e532ec96f413cd62c6547c1a594f8e44268abecd2222ae593d6cfed27976
SSDEEP 3072:90noy9azdj137iubUxL/Ntly3P4ELBaq5mCbrCa5Fp54PgWdKTjOQXV:ComahF7E7S40Baq5wrPgW0TV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04846099.exe

File Explorer

04846099.exe

.exe 282KB

04846099.exe

IMPHASH cf153d148f3b48fcf9e1168b3803ffa4
SHA256 7054b6754aedc7bd4f95deeaea4bf8be7835ccbd34e777bb9676f1a2e1383090
MD5 30d5ddec9c4ac25fb2f49d50a770cd70
SHA1 a203167ff9298d4f9134a194513731d1d52a9337
SHA512 3e1636bf5f325f2beda9482b1d92b540c184981aec19f13ef17d1b18c69f46fe9e73e532ec96f413cd62c6547c1a594f8e44268abecd2222ae593d6cfed27976
SSDEEP 3072:90noy9azdj137iubUxL/Ntly3P4ELBaq5mCbrCa5Fp54PgWdKTjOQXV:ComahF7E7S40Baq5wrPgW0TV
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20483

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PeekNamedPipe VirtualQuery GetConsoleAliasA InterlockedDecrement GetLogicalDriveStringsW WaitForSingleObject CancelWaitableTimer InterlockedCompareExchange AddConsoleAliasW GetFileAttributesExA GetProcessPriorityBoost GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleTitleA GetWindowsDirectoryA CancelDeviceWakeupRequest WriteFile SetCommState GlobalAlloc GetLocaleInfoW FreeConsole GetVersionExW GlobalFlags WritePrivateProfileStructW FindNextVolumeW MulDiv GetConsoleAliasesLengthW GetModuleFileNameW CreateActCtxA GetStringTypeExA CreateJobObjectA GetProfileIntA OpenMutexW GetLastError ReadConsoleOutputCharacterA GetProcAddress AttachConsole GetLongPathNameA VirtualAlloc SetStdHandle EnterCriticalSection LoadLibraryA CreateFileMappingA DnsHostnameToComputerNameA FindFirstVolumeMountPointW IsSystemResumeAutomatic FindFirstVolumeMountPointA GetModuleHandleA SetProcessShutdownParameters _lopen FindAtomW GetFileInformationByHandle AddConsoleAliasA DebugBreak lstrlenA SetThreadContext ReplaceFileW GetTempFileNameW GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WideCharToMultiByte SetHandleCount GetStdHandle GetFileType DeleteCriticalSection LeaveCriticalSection Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

user32

CharLowerBuffA

gdi32

GetCharWidthW EnumFontsW GetCharABCWidthsFloatW

Sharing