file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 311KB
Sample230702-pl6vyscf3v
SHA256 2b4cde43e756dbb5337d00fb45dabfd9edcd5c83cd593b7f9f365320fba09727
MD5 91c55531ee20e53920b55f525ecf0d5c
SHA1 1d945a18faef6bbaffe4928afdabe10b555478e9
SHA512 48cc79f63f379a8bb697f286fc00a3389181b9e72588dd4c3c0a6de2b64af0548323668dcbbce20c8f5accec6b2749270fb4296b7131ee573883d0e2db488399
SSDEEP 6144:r7LXbE4lcE6wPGXBWauUmA6OQUF1q0pOndFchF2:/zbE4h///UN6ONjYYj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 311KB

file.exe

IMPHASH 1c15411a7b0a521516a3f8afd8e166ae
SHA256 2b4cde43e756dbb5337d00fb45dabfd9edcd5c83cd593b7f9f365320fba09727
MD5 91c55531ee20e53920b55f525ecf0d5c
SHA1 1d945a18faef6bbaffe4928afdabe10b555478e9
SHA512 48cc79f63f379a8bb697f286fc00a3389181b9e72588dd4c3c0a6de2b64af0548323668dcbbce20c8f5accec6b2749270fb4296b7131ee573883d0e2db488399
SSDEEP 6144:r7LXbE4lcE6wPGXBWauUmA6OQUF1q0pOndFchF2:/zbE4h///UN6ONjYYj
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16962

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW DeleteVolumeMountPointA EnumCalendarInfoW GetLogicalDriveStringsW UnlockFile GetTickCount GetConsoleAliasesA GetNumberFormatA GetCompressedFileSizeW ClearCommBreak FindResourceExA GlobalAlloc LoadLibraryW ReadConsoleInputA CopyFileW GetSystemWindowsDirectoryA GetStringTypeExW EnumSystemCodePagesA FindNextVolumeW MulDiv GetVolumePathNameA GetDevicePowerState ReplaceFileA CreateMutexW FindFirstFileA OpenMutexW GetLongPathNameW SetLastError GetProcAddress BeginUpdateResourceW EnumDateFormatsExA IsValidCodePage LoadLibraryA CreateFileMappingA CreateHardLinkW BeginUpdateResourceA SetProcessWorkingSetSize HeapWalk GetModuleHandleA SetLocaleInfoW GetWindowsDirectoryW CloseHandle CreateFileA FlushFileBuffers WriteConsoleW GetComputerNameA GetDateFormatW SetCurrentDirectoryA GetConsoleOutputCP WriteConsoleA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle RaiseException

user32

GetClipboardOwner CharToOemBuffA CharUpperBuffW DdeCreateStringHandleA GetMenuBarInfo LoadMenuA DdeQueryStringA

gdi32

GetCharABCWidthsI

advapi32

InitializeAcl

winhttp

WinHttpQueryHeaders