file[.]exe | Triage™

General

Target
file.exe
Size 417KB
Sample230615-aaa7kseb37
SHA256 37e0b7e14eaeeb2205c87261982e272eaa6dd4b95fdd2edc7b2a5b9d29b64a09
MD5 4b6cc351bebafc5a8dfc4ea4aa59fa4b
SHA1 104aaf3125ada0828f23a4424a11b6f0699bd9d5
SHA512 d6fed6fa7c563f90503e2c7914bfbfea7f367302ef8e2356e1550b84d4adeb88b265ecf38ac3a5d28efd196e90d0cad8169f853635e04932c0ecc6b4e321cd35
SSDEEP 12288:ga/0Bp8z2+WEhg8DKG4NHeoX5IBg0nuU:gFj8zqig84NePuU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 417KB

file.exe

IMPHASH 554b97b4ca75d054417a17a8c740d1a8
SHA256 37e0b7e14eaeeb2205c87261982e272eaa6dd4b95fdd2edc7b2a5b9d29b64a09
MD5 4b6cc351bebafc5a8dfc4ea4aa59fa4b
SHA1 104aaf3125ada0828f23a4424a11b6f0699bd9d5
SHA512 d6fed6fa7c563f90503e2c7914bfbfea7f367302ef8e2356e1550b84d4adeb88b265ecf38ac3a5d28efd196e90d0cad8169f853635e04932c0ecc6b4e321cd35
SSDEEP 12288:ga/0Bp8z2+WEhg8DKG4NHeoX5IBg0nuU:gFj8zqig84NePuU
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20895

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement OpenJobObjectA WaitNamedPipeA GetCurrentProcess SetMailslotInfo WritePrivateProfileSectionA FreeEnvironmentStringsA GetModuleHandleW GetTickCount SetFileTime GetDriveTypeA GlobalAlloc GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemPowerStatus GetCalendarInfoA GetFileAttributesA GetFileAttributesW TerminateProcess GetVolumePathNameA GetShortPathNameA GetPrivateProfileIntW DeleteFiber GetLogicalDriveStringsA GetProcAddress CreateMutexW MoveFileW SetComputerNameA EnterCriticalSection SearchPathA OpenThread WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW DeleteTimerQueue FindFirstVolumeMountPointW AddAtomW SetFileApisToANSI BeginUpdateResourceA GetDiskFreeSpaceA GetPrivateProfileStructA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW GetCurrentDirectoryA CompareStringA GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask GetWindowsDirectoryW EnumCalendarInfoExA EnumSystemLocalesW DeleteFileA SetProcessAffinityMask AttachConsole GetVolumeNameForVolumeMountPointA GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException HeapAlloc IsProcessorFeaturePresent EncodePointer DecodePointer HeapCreate LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW CloseHandle CreateFileW

gdi32

SelectPalette GetCharABCWidthsA

Sharing