file[.]exe | Triage™

General

Target
file.exe
Size 277KB
Sample230703-ap2yvafc91
SHA256 feb08010c5bdb7dc017bd44a4c22f44ad377bab472cddf49fd0e284b4491d744
MD5 c38abd8bb4501954e6cec0c28f7550a0
SHA1 23fa138506fc6e6d98ef22668a1f75dab003fb19
SHA512 5d1470cbeeb25b7266f677dde3cd2d419d5296402ca9992343c74e296043c9b1b240333588fcfe7b34fe84917d8e6d86658ec51580fc189eee61e53a96de24a3
SSDEEP 3072:tADL4b6yDvlASZXw7qiWBtdl7L9dutvL6rweWudpDhZTN2fS5vJ/ZEvn2ESyErLQ:8L4b/DvlA+w0dyukgdp3AC6vVSHf8Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 277KB

file.exe

IMPHASH 4aa773f91d20506f2979a40c36a81664
SHA256 feb08010c5bdb7dc017bd44a4c22f44ad377bab472cddf49fd0e284b4491d744
MD5 c38abd8bb4501954e6cec0c28f7550a0
SHA1 23fa138506fc6e6d98ef22668a1f75dab003fb19
SHA512 5d1470cbeeb25b7266f677dde3cd2d419d5296402ca9992343c74e296043c9b1b240333588fcfe7b34fe84917d8e6d86658ec51580fc189eee61e53a96de24a3
SSDEEP 3072:tADL4b6yDvlASZXw7qiWBtdl7L9dutvL6rweWudpDhZTN2fS5vJ/ZEvn2ESyErLQ:8L4b/DvlA+w0dyukgdp3AC6vVSHf8Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17138

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW GetProfileIntW DeleteVolumeMountPointA EnumCalendarInfoW GetLogicalDriveStringsW GetSystemWindowsDirectoryW UnlockFile GetTickCount GetConsoleAliasesA GetNumberFormatA GetCompressedFileSizeW ClearCommBreak GetDateFormatA GetVolumePathNameW FindResourceExA GlobalAlloc LoadLibraryW ReadConsoleInputA GetStringTypeExW EnumSystemCodePagesA FindNextVolumeW MulDiv GetDevicePowerState ReplaceFileA GetComputerNameA FindFirstFileA OpenMutexW GetLongPathNameW SetLastError lstrcmpiA GetProcAddress BeginUpdateResourceW EnumDateFormatsExA IsValidCodePage CopyFileA LoadLibraryA CreateFileMappingA CreateHardLinkW SetProcessWorkingSetSize HeapWalk GetModuleHandleA SetLocaleInfoW GetWindowsDirectoryW CloseHandle CreateFileA FlushFileBuffers WriteConsoleW SetCurrentDirectoryA GetConsoleOutputCP WriteConsoleA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle RaiseException

user32

GetClipboardOwner CharToOemBuffA CharUpperBuffW DdeCreateStringHandleA GetMenuBarInfo LoadMenuA DdeQueryStringA

gdi32

GetCharABCWidthsI

winhttp

WinHttpQueryHeaders

Sharing