file[.]exe | Triage™

General

Target
file.exe
Size 319KB
Sample230616-bgna6aca2x
SHA256 ceea0cb9fabe3d2369c55cb71c336afa9218a49d1a8a023b1844e8b3ee5bb0b7
MD5 ffc74619c348eeb09fc65b6137161871
SHA1 f11da6fead4ac0b0f96b8b27027fe36c10f8db92
SHA512 60cd1b6d8b7fe832a7942456b140d341da2dac9294c1cb43811aaa8226740824c2913fb0efbdc1b8fb9e40e8a81c931258f2b5ea20082ef15606f729236bf5ca
SSDEEP 6144:eCKRziZ3p0ytVM561hx/eNHiPl+/lNrvoH:eCAzil6yLOahVl+NNrQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 319KB

file.exe

IMPHASH a906842d3a12e68a8de3680faf4710f1
SHA256 ceea0cb9fabe3d2369c55cb71c336afa9218a49d1a8a023b1844e8b3ee5bb0b7
MD5 ffc74619c348eeb09fc65b6137161871
SHA1 f11da6fead4ac0b0f96b8b27027fe36c10f8db92
SHA512 60cd1b6d8b7fe832a7942456b140d341da2dac9294c1cb43811aaa8226740824c2913fb0efbdc1b8fb9e40e8a81c931258f2b5ea20082ef15606f729236bf5ca
SSDEEP 6144:eCKRziZ3p0ytVM561hx/eNHiPl+/lNrvoH:eCAzil6yLOahVl+NNrQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20445

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ConvertThreadToFiber GetConsoleAliasExesLengthA OpenJobObjectA InterlockedDecrement WaitNamedPipeA GetCurrentProcess SetMailslotInfo ZombifyActCtx FreeEnvironmentStringsA GetModuleHandleW GetTickCount EnumCalendarInfoExW SetFileTime EnumTimeFormatsW GetVolumePathNameW GlobalAlloc GetSystemDirectoryW SetFileShortNameW GetSystemPowerStatus GetCalendarInfoA GetFileAttributesA SetSystemPowerState TerminateProcess FindNextVolumeMountPointW EnumSystemLocalesA GetPrivateProfileIntW AllocConsole MoveFileW SetComputerNameA EnterCriticalSection SearchPathA GetDiskFreeSpaceW LoadLibraryA OpenThread WriteConsoleA GetProcessId InterlockedExchangeAdd OpenWaitableTimerW DeleteTimerQueue SetCalendarInfoW SetFileApisToANSI BeginUpdateResourceA AddAtomA GetPrivateProfileStructA FindNextFileA GetModuleHandleA OpenFileMappingW GetCurrentDirectoryA CompareStringA GetShortPathNameW GetVolumeNameForVolumeMountPointW SetFileAttributesW DeleteFileA GetProcAddress SetProcessAffinityMask WriteConsoleW HeapReAlloc GetLastError MoveFileA MultiByteToWideChar GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException HeapAlloc HeapFree IsProcessorFeaturePresent EncodePointer DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection CloseHandle ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeW Sleep SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind SetStdHandle FlushFileBuffers HeapSize LoadLibraryW CreateFileW

gdi32

SelectPalette

winhttp

WinHttpGetProxyForUrl

Sharing