file[.]exe | Triage™

General

Target
file.exe
Size 327KB
Sample230602-gva6msae9w
SHA256 60cddfbddb330df60f176c91ad237af3f8fc392d7bc2f18e1a5f02629ace40ad
MD5 f2ee5acb39ff7901a91b4bf77b904f01
SHA1 58b038f23ecd2b9c341dd3ee8484848f27fa980f
SHA512 53b1a5c0d18e42b5443c2e0f80209805f79238a0867ff3529a7468f6396a08fdb4fb8553dd90dfc7cb4dcdb2e3c8eaafbdad131f3275743ee0fbb60630ab8306
SSDEEP 6144:i80Roat20EyK84rjA85mpjoA7VFBhIAEtVGpJZx:i7Roat/XW4pjj9e0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH 35baec67ec7cac716aa6f6cb3f6a794b
SHA256 60cddfbddb330df60f176c91ad237af3f8fc392d7bc2f18e1a5f02629ace40ad
MD5 f2ee5acb39ff7901a91b4bf77b904f01
SHA1 58b038f23ecd2b9c341dd3ee8484848f27fa980f
SHA512 53b1a5c0d18e42b5443c2e0f80209805f79238a0867ff3529a7468f6396a08fdb4fb8553dd90dfc7cb4dcdb2e3c8eaafbdad131f3275743ee0fbb60630ab8306
SSDEEP 6144:i80Roat20EyK84rjA85mpjoA7VFBhIAEtVGpJZx:i7Roat/XW4pjj9e0
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25282

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject AddConsoleAliasW GetModuleHandleW GetConsoleAliasesA IsBadReadPtr GetNumberFormatA FindResourceExA GlobalAlloc AddRefActCtx GetLocaleInfoW GetCalendarInfoW FreeConsole CreateEventA FindNextVolumeW ReplaceFileW GetModuleFileNameW DeactivateActCtx GetLogicalDriveStringsA OpenMutexW GetLastError GetConsoleAliasesLengthW GetProcAddress AttachConsole VirtualAlloc CreateTimerQueueTimer VirtualAllocEx LoadLibraryA InterlockedExchangeAdd GetConsoleScreenBufferInfo WritePrivateProfileStringA FindFirstVolumeMountPointW GetCurrentConsoleFont GetModuleFileNameA lstrcmpiW GetModuleHandleA GetCommTimeouts GetCurrentThreadId GetVersionExA FindAtomW DebugBreak ReadConsoleOutputCharacterW OpenFileMappingA WritePrivateProfileStructA CreateMutexW GetCurrentDirectoryW GetDateFormatW HeapFree GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

RegisterClassW CharLowerBuffA

gdi32

GetBkMode GetCharABCWidthsFloatA GetCharWidthW

Sharing