05082899[.]exe | Triage™

General

Target
05082899.exe
Size 207KB
Sample230601-sb7ahsfb7z
SHA256 1c0ff8e4f1626bdf9e8570c7dab4fd138ab71f3ab4bd9feb9e544a902b142d62
MD5 7d4c93a0f0d37c3485d6b341d96b79d5
SHA1 c5eb0fbb8526bb2d63c5893cd4b3930e12c5a642
SHA512 186e49b9c0e8aee3c05778bf48c2af27d14b68e3e46346c2ddd27be8211efda408716fb43dea2931e9f20107d82780df060659b048c467c95fd8ffdee12e30a7
SSDEEP 3072:gXjWv19ZaUtsa5Wf+erpaKL6CGJp8asLRgW3NUBsPYr0e7bEDD5bwDK0:UIPs9+erpaKpGJsgy0rPbElw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05082899.exe

File Explorer

05082899.exe

.exe 207KB

05082899.exe

IMPHASH 34801832eecaf69fd08479129ee995ac
SHA256 1c0ff8e4f1626bdf9e8570c7dab4fd138ab71f3ab4bd9feb9e544a902b142d62
MD5 7d4c93a0f0d37c3485d6b341d96b79d5
SHA1 c5eb0fbb8526bb2d63c5893cd4b3930e12c5a642
SHA512 186e49b9c0e8aee3c05778bf48c2af27d14b68e3e46346c2ddd27be8211efda408716fb43dea2931e9f20107d82780df060659b048c467c95fd8ffdee12e30a7
SSDEEP 3072:gXjWv19ZaUtsa5Wf+erpaKL6CGJp8asLRgW3NUBsPYr0e7bEDD5bwDK0:UIPs9+erpaKpGJsgy0rPbElw
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25602

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject InterlockedCompareExchange AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA IsBadReadPtr GetNumberFormatA FindResourceExA GlobalAlloc AddRefActCtx GetCalendarInfoW FreeConsole CreateEventA GetStringTypeExW FindNextVolumeW IsProcessorFeaturePresent ReplaceFileW GetModuleFileNameW DeactivateActCtx GetLogicalDriveStringsA GetConsoleAliasesLengthW GetLastError GetCurrentDirectoryW GetProcAddress AttachConsole VirtualAlloc CreateTimerQueueTimer SetStdHandle VirtualAllocEx LoadLibraryA WritePrivateProfileStringA FindFirstVolumeMountPointW GetCurrentConsoleFont GetModuleFileNameA lstrcmpiW GetModuleHandleA GetCommTimeouts GetConsoleCursorInfo GetCurrentThreadId GetVersionExA FindAtomW DebugBreak ReadConsoleOutputCharacterW OpenFileMappingA WritePrivateProfileStructA CreateMutexW OpenMutexW GetDateFormatW HeapFree GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

CharLowerBuffA

gdi32

GetBkMode GetCharABCWidthsFloatA GetCharWidthW

Sharing