file[.]exe | Triage™

General

Target
file.exe
Size 284KB
Sample230613-rplqashb2t
SHA256 cdbb23d2903063282fe152ac63e2838af4c099c2fa18e91d44448ede4cef0a30
MD5 53b33f55cb362ea03a85def0a7eda81e
SHA1 3f2fc209753494fb5f7115b2059b550c3da096ce
SHA512 2542451813e539e53be6d64dd44da937017c8de870c0219f07a58ec79cd0a5a9342573cca637c2bea06a0b0fa44d1ab10f624f23afdb2b7ffa16f7da3608fbb0
SSDEEP 6144:5XE3i2rmViGtul1HJ5DCgXW33wcmBSNMDYuYawVHFGOJw:5XiGIlJ+vgcQ6MDY5V4OJw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 284KB

file.exe

IMPHASH ea06f0ebd05782e9caa4e3157d406e08
SHA256 cdbb23d2903063282fe152ac63e2838af4c099c2fa18e91d44448ede4cef0a30
MD5 53b33f55cb362ea03a85def0a7eda81e
SHA1 3f2fc209753494fb5f7115b2059b550c3da096ce
SHA512 2542451813e539e53be6d64dd44da937017c8de870c0219f07a58ec79cd0a5a9342573cca637c2bea06a0b0fa44d1ab10f624f23afdb2b7ffa16f7da3608fbb0
SSDEEP 6144:5XE3i2rmViGtul1HJ5DCgXW33wcmBSNMDYuYawVHFGOJw:5XiGIlJ+vgcQ6MDY5V4OJw
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5892

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 ord698 __vbaFreeObjList ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaAryVar __vbaVarTstLe ord667 __vbaAryDestruct __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord631 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall _adj_fpatan EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaVar2Vec __vbaInStr __vbaCyMulI2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarCmpEq __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaVarCopy ord617 _CIatan __vbaUI1Str __vbaAryCopy ord618 __vbaStrMove __vbaI4Cy __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj

Sharing