file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 360KB
Sample230620-hfrqhsae45
SHA256 9814dc8b4f8fb8907dc10eec1738afca5260ec977c6d774f1cbfbce7f7002430
MD5 593a630e010736dabdeafbaaa6c04858
SHA1 1fa2f19cddcab9346519d415eb95c380596eb816
SHA512 64211431cd5542d989b20f77cc81a3f69558eac12959807d02af96546b441d3dc68898cad9d18f40be293360e38f16a6f8eca88b162e646b09bddbcd0647c413
SSDEEP 6144:iGnSHH43m0xLKrZ3Hp6IaBuQ0rgVWCaQ:uHrZ3pfaBs2b
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 360KB

file.exe

IMPHASH 90a8b2b6ad978d000a5ba3658ad3f7fb
SHA256 9814dc8b4f8fb8907dc10eec1738afca5260ec977c6d774f1cbfbce7f7002430
MD5 593a630e010736dabdeafbaaa6c04858
SHA1 1fa2f19cddcab9346519d415eb95c380596eb816
SHA512 64211431cd5542d989b20f77cc81a3f69558eac12959807d02af96546b441d3dc68898cad9d18f40be293360e38f16a6f8eca88b162e646b09bddbcd0647c413
SSDEEP 6144:iGnSHH43m0xLKrZ3Hp6IaBuQ0rgVWCaQ:uHrZ3pfaBs2b
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33117

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement UnlockFile GetModuleHandleW GetTickCount GetConsoleAliasesA GetDateFormatA CreateActCtxW GetVolumePathNameW FindResourceExA GlobalAlloc LoadLibraryW SetCommConfig GetCalendarInfoW FormatMessageW WriteConsoleOutputA FindNextVolumeW WriteConsoleW GetACP GetStringTypeExA GetProfileIntA SetCurrentDirectoryA GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW SetLastError ReadConsoleA VirtualAlloc IsValidCodePage ReadFileEx LoadLibraryA OpenMutexA BeginUpdateResourceA GetModuleFileNameA QueryMemoryResourceNotification PurgeComm OpenSemaphoreW FindFirstVolumeA GetVersionExA ReadConsoleInputW GetWindowsDirectoryW GetCurrentProcessId AddConsoleAliasA CommConfigDialogW CreateFileA GetConsoleOutputCP WriteConsoleA CloseHandle SetUnhandledExceptionFilter CreateTimerQueue GetProcAddress SetProcessAffinityMask FlushFileBuffers GetConsoleMode GetConsoleCP InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo ExitProcess WriteFile GetStdHandle HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetOEMCP GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetLocaleInfoW

user32

LoadMenuW GetSysColorBrush GetCaretPos CharUpperBuffW CharToOemBuffW

gdi32

GetTextExtentPointW

advapi32

ReportEventA ReadEventLogW

winhttp

WinHttpSetDefaultProxyConfiguration WinHttpOpen WinHttpCheckPlatform