09208699[.]exe | Triage™

General

Target
09208699.exe
Size 491KB
Sample230528-wla7lsga72
SHA256 2aaae232c889912fe61abafb3dd36bfa3499d21daaf61d8c839ed53c50ffa388
MD5 076e8cfedfa31e546087a943e5e7c681
SHA1 19df36322342a4084ecf28606ad9372eb348fd3c
SHA512 0f5736f86b2fdf0c0a3ea9dbbd49c7883811a8675a67b6358b25bae9011931a94ad3a92ef89e1787ad50b91c95084a982758fc218371244153c0e0416208e6bf
SSDEEP 6144:AeoWC4NAyTwOZiaOjhl/xMTU4uaa1XcqhcmK2AD/5/klaT8F6:LoWH9TwOZiLjl9DKL/kg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09208699.exe

File Explorer

09208699.exe

.exe 491KB

09208699.exe

IMPHASH 96475f7ea3cc105ae1bb971e987af868
SHA256 2aaae232c889912fe61abafb3dd36bfa3499d21daaf61d8c839ed53c50ffa388
MD5 076e8cfedfa31e546087a943e5e7c681
SHA1 19df36322342a4084ecf28606ad9372eb348fd3c
SHA512 0f5736f86b2fdf0c0a3ea9dbbd49c7883811a8675a67b6358b25bae9011931a94ad3a92ef89e1787ad50b91c95084a982758fc218371244153c0e0416208e6bf
SSDEEP 6144:AeoWC4NAyTwOZiaOjhl/xMTU4uaa1XcqhcmK2AD/5/klaT8F6:LoWH9TwOZiLjl9DKL/kg
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18473

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualFree IsBadReadPtr GetConsoleAliasesLengthA WaitForMultipleObjectsEx FreeConsole GetVersionExW WritePrivateProfileStructW IsProcessorFeaturePresent MulDiv EnumResourceLanguagesA GetModuleFileNameW CreateActCtxA WritePrivateProfileStringW ReplaceFileA GetStringTypeExA GetStdHandle GetLogicalDriveStringsA OpenMutexW GetLastError ReadConsoleOutputCharacterA GetModuleHandleW AttachConsole VirtualAlloc LoadLibraryA InterlockedExchangeAdd LocalAlloc GetFileType CreateFileMappingW FindFirstVolumeMountPointW GetNumberFormatW CreateEventW GetModuleFileNameA lstrcmpiW GetModuleHandleA CreateMutexA CancelTimerQueueTimer GetFileAttributesExW GetConsoleCursorInfo ScrollConsoleScreenBufferA GetCurrentThreadId FindAtomW DebugBreak FindNextVolumeA AddConsoleAliasW CancelWaitableTimer GetCommState WaitForSingleObject GetProcAddress GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount DeleteCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA

user32

CharLowerBuffA

gdi32

EnumFontsW GetCharABCWidthsFloatA GetCharWidthW

advapi32

MapGenericMask

Sharing