file[.]exe | Triage™

General

Target
file.exe
Size 289KB
Sample230613-slqqhsgg74
SHA256 b60fb210e933c378ea02c72fe727d351503d43a8da16f2a1bfa40659fecb807d
MD5 cef90f28843b84bcc35b2b95bcc7a33f
SHA1 83fc1adc6f5491c7999141fa4951cf0eb59e68d8
SHA512 636ef435b2674496cb08ac2584cfaec5113383c024ed507a20be93f2099584e131584d124ed1f764b849a774329321ff5fa09e46d483f2a1518e19a7a604afe4
SSDEEP 6144:geFyHXMRwm2rznji1jr94+7eRZMzUQdHD7:fym2HjW9TG+z1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 289KB

file.exe

IMPHASH 7c7a6cc71dd3b50d1830b62fec5ef581
SHA256 b60fb210e933c378ea02c72fe727d351503d43a8da16f2a1bfa40659fecb807d
MD5 cef90f28843b84bcc35b2b95bcc7a33f
SHA1 83fc1adc6f5491c7999141fa4951cf0eb59e68d8
SHA512 636ef435b2674496cb08ac2584cfaec5113383c024ed507a20be93f2099584e131584d124ed1f764b849a774329321ff5fa09e46d483f2a1518e19a7a604afe4
SSDEEP 6144:geFyHXMRwm2rznji1jr94+7eRZMzUQdHD7:fym2HjW9TG+z1
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22237

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW WriteConsoleOutputW _lwrite ReadConsoleA InterlockedDecrement GetLogicalDriveStringsW WaitForSingleObject AddConsoleAliasW CreateHardLinkA GetProcessPriorityBoost GetModuleHandleW GetTickCount GetConsoleAliasesA CreateRemoteThread GetConsoleAliasExesW GlobalAlloc _hread FormatMessageW FindNextVolumeW ReadFile GetModuleFileNameW CreateActCtxA CommConfigDialogA GlobalUnlock SetCurrentDirectoryA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LocalLock IsValidCodePage CreateMemoryResourceNotification LoadLibraryA WriteConsoleA FindAtomA OpenFileMappingW VirtualProtect GetCurrentDirectoryA GetVersionExA FileTimeToLocalFileTime GetCurrentProcessId WriteConsoleW GetConsoleOutputCP GetLocaleInfoA GetACP CreateTimerQueue InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetOEMCP GetStringTypeA GetStringTypeW CloseHandle CreateFileA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetEndOfFile GetProcessHeap

user32

LoadMenuW GetCaretPos CharUpperBuffA

advapi32

MapGenericMask ReportEventW

Sharing