file[.]exe | Triage™

General

Target
file.exe
Size 379KB
Sample230620-j3tztsca8z
SHA256 96b0696e091b6dc3532d98739e162ec1ac7535faefbe3bd8fb14e926e9e4924a
MD5 b494566c506f600c5845ad065e7c861f
SHA1 cd81776c7fe40a990d43ab828f7710318448bf1c
SHA512 5dbabaabe70c9c79ff43ff9114b7847d9f78d1ac4c0c5cf3556cb6450c1e9d7f9e75ded422a7a9173a6015fea52bec87234138b1701c5b5b9d306156783c0ce1
SSDEEP 6144:mJNjh6AqaG9hZy5yqoRf0+4hk+T3uePepyBBu:Yh6rzgoRf0US3SCBu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 379KB

file.exe

IMPHASH b1a5bdbc77a4868d9509a53571fbe8fe
SHA256 96b0696e091b6dc3532d98739e162ec1ac7535faefbe3bd8fb14e926e9e4924a
MD5 b494566c506f600c5845ad065e7c861f
SHA1 cd81776c7fe40a990d43ab828f7710318448bf1c
SHA512 5dbabaabe70c9c79ff43ff9114b7847d9f78d1ac4c0c5cf3556cb6450c1e9d7f9e75ded422a7a9173a6015fea52bec87234138b1701c5b5b9d306156783c0ce1
SSDEEP 6144:mJNjh6AqaG9hZy5yqoRf0+4hk+T3uePepyBBu:Yh6rzgoRf0US3SCBu
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23428

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW ClearCommError SetUnhandledExceptionFilter ReadConsoleA InterlockedDecrement GetLogicalDriveStringsW GetComputerNameW UnlockFile GetTickCount GetConsoleAliasesA FormatMessageA GetWindowsDirectoryA SetCommTimeouts GetVolumePathNameW FindResourceExA SetCommConfig ReadConsoleInputA WriteConsoleOutputA GetStringTypeExW FindNextVolumeW WriteConsoleW ReplaceFileW GetModuleFileNameW GetCompressedFileSizeA GetACP VirtualQuery SetCurrentDirectoryA GetLogicalDriveStringsA GetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW LoadLibraryA OpenMutexA MoveFileA CreateFileMappingW GetModuleHandleA PurgeComm GetCurrentDirectoryA OpenSemaphoreW FindFirstVolumeA GetVersionExA GetWindowsDirectoryW GetCurrentProcessId LCMapStringW LCMapStringA CreateMutexW SetFilePointer GetDateFormatW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCommandLineA GetStartupInfoA UnhandledExceptionFilter HeapFree RtlUnwind RaiseException HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

CharUpperBuffA LoadMenuW GetSysColorBrush SetCaretPos CharToOemBuffA

gdi32

GetTextExtentPointW

advapi32

ReportEventA ReadEventLogW

Sharing