file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 245KB
Sample230702-3nvglafc4s
SHA256 922eaabfa10ed3e5b647a39480f654866f4d4daff57fbda4adc0b3a91a9b4df5
MD5 3cb4486372d26a40c580113343e41ba7
SHA1 c06e3bfb65cdb8dfe1880534950ae9c443dad147
SHA512 f66431db407e31667f01a0772a2d699ff78866ca61f38647b1274fac7321ffeb081124984909a6a1e56831846eef1e8ba15615f333cd3db7ef961c6b845e9dbf
SSDEEP 6144:dTG3HW77/IpsZAoovGTeTiv5LeNDGOb+asE:dT7K4eTiv5Lyb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 245KB

file.exe

IMPHASH 9fc536475d83b8af187b6bb597df0e0c
SHA256 922eaabfa10ed3e5b647a39480f654866f4d4daff57fbda4adc0b3a91a9b4df5
MD5 3cb4486372d26a40c580113343e41ba7
SHA1 c06e3bfb65cdb8dfe1880534950ae9c443dad147
SHA512 f66431db407e31667f01a0772a2d699ff78866ca61f38647b1274fac7321ffeb081124984909a6a1e56831846eef1e8ba15615f333cd3db7ef961c6b845e9dbf
SSDEEP 6144:dTG3HW77/IpsZAoovGTeTiv5LeNDGOb+asE:dT7K4eTiv5Lyb
MD5 SHA1 SHA512 SSDEEP

windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

96500

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CopyFileA SetFileAttributesA FindClose GetPrivateProfileStringA LocalAlloc WritePrivateProfileStringA GetSystemInfo GetModuleFileNameA GetPrivateProfileSectionA CompareStringA GetUserDefaultUILanguage GetVersionExA CloseHandle GetVersion LocalFree DeleteFileA FreeResource MapViewOfFile UnmapViewOfFile _llseek FreeLibrary LoadResource _lwrite GetProcAddress _lclose GetTickCount EnumResourceTypesA FindResourceExA GlobalAlloc SizeofResource EnumResourceLanguagesA GlobalUnlock SetLastError GlobalFree GetTempFileNameA CreateFileMappingA MoveFileA LockResource _lread LoadLibraryExA EnumResourceNamesA ReadFile GetTempPathA GetCurrentDirectoryA GetModuleHandleW WideCharToMultiByte MultiByteToWideChar lstrcmpiA GetLastError FindFirstFileA CreateDirectoryA GlobalLock GetShortPathNameA CreateFileW GetLocaleInfoW WriteConsoleW SetStdHandle VirtualQuery SetThreadStackGuarantee VirtualAlloc VirtualProtect GetStringTypeW GetConsoleMode GetConsoleCP SetFilePointer Sleep FlushFileBuffers LoadLibraryExW InitializeCriticalSectionAndSpinCount EnterCriticalSection LeaveCriticalSection LCMapStringW OpenEventA WaitForSingleObject GetModuleHandleA LoadLibraryA CreateFileMappingW CreateProcessA GetExitCodeProcess GetFileAttributesA GetPrivateProfileIntA WriteFile GetFileInformationByHandle FormatMessageA FindResourceExW GetSystemDefaultUILanguage SearchPathW IsDBCSLeadByte WritePrivateProfileSectionA lstrlenA lstrcmpA CreateFileA GetSystemTime GetFullPathNameA GetCommandLineA GetVersionExW GetStartupInfoW HeapFree HeapAlloc SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection EncodePointer DecodePointer FlsFree FlsSetValue FlsGetValue GetCurrentThreadId FlsAlloc HeapSetInformation HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter OutputDebugStringA GetCPInfo GetACP GetOEMCP

gdi32

CreateFontIndirectA DeleteObject GetObjectA GetStockObject GetDeviceCaps

user32

GetWindowRect CheckDlgButton ShowWindow IsDlgButtonChecked CheckRadioButton GetDlgItemTextA GetWindowLongPtrA SendDlgItemMessageA MsgWaitForMultipleObjects LoadStringA GetParent MessageBeep CharNextA SetFocus SendMessageA GetDC MessageBoxA PeekMessageA ReleaseDC GetDlgItem SetWindowLongPtrA PostMessageA DispatchMessageA GetSystemMetrics EnableWindow CallWindowProcA SetDlgItemTextA CharPrevA

ntdll

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlUnwindEx

comctl32

DestroyPropertySheetPage CreatePropertySheetPageA PropertySheetA

comdlg32

GetSaveFileNameA GetOpenFileNameA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

imagehlp

CheckSumMappedFile

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExA RegQueryValueExA RegOpenKeyExW