file[.]exe | Triage™

General

Target
file.exe
Size 292KB
Sample230615-ldly2aff61
SHA256 7dcce45a8f4eeee1b834efd4f522ae2c690923b7fd84e6b212fad693f82602bc
MD5 dd34d0ec52c4855c174ac658a5d35dff
SHA1 90bba50c47f7100c2a0b69a133ed679d1227b1e0
SHA512 aecb0786afbb85e31fb600df55e77514c31b0d4f8c3ed1c56d43b253064df5463a1c6b847b2468ef6a6437dbb762c7820be2e112514f9e8850ccc3be27bab2a1
SSDEEP 6144:qnNrG9dT97DObDFDDaDDWoOiteNiuUDmUgoH:qNrG9l9fOHFvCLjtekuUDH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 292KB

file.exe

IMPHASH bc6756801ecd28fd46322f450f7e2c14
SHA256 7dcce45a8f4eeee1b834efd4f522ae2c690923b7fd84e6b212fad693f82602bc
MD5 dd34d0ec52c4855c174ac658a5d35dff
SHA1 90bba50c47f7100c2a0b69a133ed679d1227b1e0
SHA512 aecb0786afbb85e31fb600df55e77514c31b0d4f8c3ed1c56d43b253064df5463a1c6b847b2468ef6a6437dbb762c7820be2e112514f9e8850ccc3be27bab2a1
SSDEEP 6144:qnNrG9dT97DObDFDDaDDWoOiteNiuUDmUgoH:qNrG9l9fOHFvCLjtekuUDH
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20629

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement WaitNamedPipeA GetCurrentProcess SetMailslotInfo GetModuleHandleW GetTickCount SetFileTime GlobalAlloc GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemPowerStatus GetCalendarInfoA GetFileAttributesA GetVolumePathNameA GetShortPathNameA DeleteFiber GetProcAddress AttachConsole MoveFileW SetComputerNameA EnterCriticalSection SetProcessAffinityMask WriteConsoleA InterlockedExchangeAdd DeleteTimerQueue FindFirstVolumeMountPointW BeginUpdateResourceA GetDiskFreeSpaceA AddAtomA GetPrivateProfileStructA FindNextFileA GetModuleHandleA OpenFileMappingW FreeEnvironmentStringsW GetCurrentDirectoryA GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask EnumCalendarInfoExA EnumSystemLocalesW DeleteFileA GetVolumeNameForVolumeMountPointA SearchPathA ExitProcess GetLastError GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException HeapAlloc HeapFree IsProcessorFeaturePresent EncodePointer DecodePointer LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess WriteFile GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW CloseHandle CreateFileW

gdi32

SelectPalette GetCharABCWidthsA

Sharing