file[.]exe | Triage™

General

Target
file.exe
Size 287KB
Sample230615-b6y4ysec85
SHA256 59206515a48f6fcfdf4e1ec5e8bf4ddd052a7415f86d52e39f59b15fb7e64002
MD5 a8aa85737340b2e85791e328c1bf037a
SHA1 d4a340db62a5cea41cf156b685c46fcbc6aec067
SHA512 b5aec21ccadc21afa3c8dd0c2121371e7c766e75f59436e4d161ca286742e18b1abe091126fc579575f47d945fd1ead0049542cb7913ded1da95ebab00e56cae
SSDEEP 3072:XE59rF74OHAIZPIejA7EXphrKKgQDOpOUSOmLs/QjBoPrumkZj/Suc5Hpeh9MwBN:05ZFURISFodKKk5QFoXkZDSNdc+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 287KB

file.exe

IMPHASH 554b97b4ca75d054417a17a8c740d1a8
SHA256 59206515a48f6fcfdf4e1ec5e8bf4ddd052a7415f86d52e39f59b15fb7e64002
MD5 a8aa85737340b2e85791e328c1bf037a
SHA1 d4a340db62a5cea41cf156b685c46fcbc6aec067
SHA512 b5aec21ccadc21afa3c8dd0c2121371e7c766e75f59436e4d161ca286742e18b1abe091126fc579575f47d945fd1ead0049542cb7913ded1da95ebab00e56cae
SSDEEP 3072:XE59rF74OHAIZPIejA7EXphrKKgQDOpOUSOmLs/QjBoPrumkZj/Suc5Hpeh9MwBN:05ZFURISFodKKk5QFoXkZDSNdc+
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20895

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement OpenJobObjectA WaitNamedPipeA GetCurrentProcess SetMailslotInfo WritePrivateProfileSectionA FreeEnvironmentStringsA GetModuleHandleW GetTickCount SetFileTime GetDriveTypeA GlobalAlloc GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemPowerStatus GetCalendarInfoA GetFileAttributesA GetFileAttributesW TerminateProcess GetVolumePathNameA GetShortPathNameA GetPrivateProfileIntW DeleteFiber GetLogicalDriveStringsA GetProcAddress CreateMutexW MoveFileW SetComputerNameA EnterCriticalSection SearchPathA OpenThread WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW DeleteTimerQueue FindFirstVolumeMountPointW AddAtomW SetFileApisToANSI BeginUpdateResourceA GetDiskFreeSpaceA GetPrivateProfileStructA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW GetCurrentDirectoryA CompareStringA GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask GetWindowsDirectoryW EnumCalendarInfoExA EnumSystemLocalesW DeleteFileA SetProcessAffinityMask AttachConsole GetVolumeNameForVolumeMountPointA GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException HeapAlloc IsProcessorFeaturePresent EncodePointer DecodePointer HeapCreate LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW CloseHandle CreateFileW

gdi32

SelectPalette GetCharABCWidthsA

Sharing