file[.]exe | Triage™

General

Target
file.exe
Size 336KB
Sample230602-bbhhqahe8s
SHA256 54f4c5cc097a37ed8aa2da97869bd7251f68020b3c1dd66ea977bacaf717817c
MD5 20de865da804355d73d8d1b5924b4c13
SHA1 0659b2e3847edc555ed5dc92e0a7bfb588fe8062
SHA512 61d48e80cafc83c09b07e342915f4a95241a75d5040ac95d432869bfd5406b941ff670114fc692fc10b08af39aa237efb4d25b86934bd81ba4214228f10d9874
SSDEEP 6144:pDnR1qkR47xM2MoOTVnAMpveKuV57KbN:pDnvVR43MNpnDuV1A
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 336KB

file.exe

IMPHASH b9512067b0ff2431debec33d2434e6e7
SHA256 54f4c5cc097a37ed8aa2da97869bd7251f68020b3c1dd66ea977bacaf717817c
MD5 20de865da804355d73d8d1b5924b4c13
SHA1 0659b2e3847edc555ed5dc92e0a7bfb588fe8062
SHA512 61d48e80cafc83c09b07e342915f4a95241a75d5040ac95d432869bfd5406b941ff670114fc692fc10b08af39aa237efb4d25b86934bd81ba4214228f10d9874
SSDEEP 6144:pDnR1qkR47xM2MoOTVnAMpveKuV57KbN:pDnvVR43MNpnDuV1A
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25154

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject AddConsoleAliasW GetCurrentThread GetConsoleAliasesA IsBadReadPtr GetNumberFormatA FindResourceExA GlobalAlloc AddRefActCtx GetLocaleInfoW GetCalendarInfoW FreeConsole CreateEventA FindNextVolumeW GetModuleFileNameW ReplaceFileA DeactivateActCtx GetLogicalDriveStringsA OpenMutexW GetLastError GetConsoleAliasesLengthW ChangeTimerQueueTimer ReadConsoleOutputCharacterA GetProcAddress AttachConsole VirtualAlloc VirtualAllocEx LoadLibraryA InterlockedExchangeAdd GetConsoleScreenBufferInfo WritePrivateProfileStringA FindFirstVolumeMountPointW GetCurrentConsoleFont GetModuleFileNameA lstrcmpiW GetModuleHandleA GetCommTimeouts GetVersionExA FindAtomW DebugBreak OpenFileMappingA WritePrivateProfileStructA CreateMutexW GetCurrentDirectoryW GetDateFormatW HeapFree GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

RegisterClassW CharLowerBuffA

gdi32

GetBkMode GetCharABCWidthsFloatA GetCharWidthW

Sharing