file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 277KB
Sample230702-zyandsdf66
SHA256 6d6be71b6cdc81a5dfe0ac14628657edbd3e2b3b4255d2d7848cfd8c1ffbf984
MD5 1b092c17d5f337e854e6ec4486edfa15
SHA1 81fe445b6571f629741c410199b396797a0a5305
SHA512 75330553c63b759cedf6d86fada690b9014b97e5cb3a5ad2e33b26617c81eaf63b2ed7979d94cd1f6c7107085054b554cc3886beb0301c902eef73e5e23c05de
SSDEEP 3072:uF7UL9btw2736ln3CFqvJph0oCG2L9QyJwrZRufXmaot2rI3Ivdv9pD5l8H4ypnE:awL9byQ36ZRvJH0B5L+yjEYvdVp8TnE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 277KB

file.exe

IMPHASH 130761c8058587162de9b63262a67cc0
SHA256 6d6be71b6cdc81a5dfe0ac14628657edbd3e2b3b4255d2d7848cfd8c1ffbf984
MD5 1b092c17d5f337e854e6ec4486edfa15
SHA1 81fe445b6571f629741c410199b396797a0a5305
SHA512 75330553c63b759cedf6d86fada690b9014b97e5cb3a5ad2e33b26617c81eaf63b2ed7979d94cd1f6c7107085054b554cc3886beb0301c902eef73e5e23c05de
SSDEEP 3072:uF7UL9btw2736ln3CFqvJph0oCG2L9QyJwrZRufXmaot2rI3Ivdv9pD5l8H4ypnE:awL9byQ36ZRvJH0B5L+yjEYvdVp8TnE
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17090

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA EnumCalendarInfoW GetLogicalDriveStringsW GetSystemWindowsDirectoryW UnlockFile GetTickCount GetConsoleAliasesA GetNumberFormatA GetCompressedFileSizeW ClearCommBreak GetDateFormatA GetVolumePathNameW FindResourceExA GlobalAlloc LoadLibraryW ReadConsoleInputA GetStringTypeExW EnumSystemCodePagesA FindNextVolumeW MulDiv GetDevicePowerState ReplaceFileA SetCurrentDirectoryA GetProfileIntW OpenMutexW GetLongPathNameW SetLastError GetProcAddress BeginUpdateResourceW EnumDateFormatsExA IsValidCodePage CopyFileA LoadLibraryA CreateFileMappingA CreateHardLinkW SetProcessWorkingSetSize HeapWalk GetModuleHandleA SetLocaleInfoW GetWindowsDirectoryW CloseHandle CreateFileA FlushFileBuffers WriteConsoleW GetComputerNameA CreateMutexW FindFirstFileA GetConsoleOutputCP WriteConsoleA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle RaiseException

user32

GetClipboardOwner CharToOemBuffA CharUpperBuffW DdeCreateStringHandleA GetMenuBarInfo LoadMenuA DdeQueryStringA

gdi32

GetCharABCWidthsI

advapi32

InitializeAcl

winhttp

WinHttpQueryHeaders