file[.]exe | Triage™

General

Target
file.exe
Size 227KB
Sample230620-h69zsaag28
SHA256 a4cd87054bb789eb286fa05256bc4b372592f4f6a463eae25370ad6616112b21
MD5 fd72a67f1fe513068bb46bf63d943c9a
SHA1 24ac52adbdd3187680c96502140170b922509c55
SHA512 a39532c23fae206c69fa0c18cc9c0d62b215dda72dbe6698d984861465abdd2fbcb8daff3a33f328cac22b9ad8501343a6d5e67a796939308138191491e71f63
SSDEEP 3072:IWhQfgJapgTpcC8p+882Rlvo6o2sVmJNv5IXUQ6mBlyUNcffWvZsJxGPmDaGajek:IWhQfRuyR8Rg5RmlNrbGqegMC6n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 227KB

file.exe

IMPHASH afd3d49c95dff180e14b1d2081e826d0
SHA256 a4cd87054bb789eb286fa05256bc4b372592f4f6a463eae25370ad6616112b21
MD5 fd72a67f1fe513068bb46bf63d943c9a
SHA1 24ac52adbdd3187680c96502140170b922509c55
SHA512 a39532c23fae206c69fa0c18cc9c0d62b215dda72dbe6698d984861465abdd2fbcb8daff3a33f328cac22b9ad8501343a6d5e67a796939308138191491e71f63
SSDEEP 3072:IWhQfgJapgTpcC8p+882Rlvo6o2sVmJNv5IXUQ6mBlyUNcffWvZsJxGPmDaGajek:IWhQfRuyR8Rg5RmlNrbGqegMC6n
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24003

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject Sleep GetCurrentProcess CreateThread VirtualAlloc VirtualProtect GetModuleHandleA GetProcAddress LoadLibraryA lstrlenW WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW CloseHandle DecodePointer

Sharing