file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample230703-j95pxagh3s
SHA256 5a5fdf00d2ed5e84a44c438521c623f61526931de8ed806d49f56af0d0fbb46b
MD5 5cd0ae9fb4232e080746e8a6a24703b8
SHA1 e16c9208a0452988c0444ab313ac9bce75dce999
SHA512 42ad294670adfbc2d1dac7c5767e3a746c062d57cd8e77172def11c31911589bb02e2fbc2282f9f405544ec57f36c34f5573d8ec274469810c5ed149ee3f0d74
SSDEEP 6144:+aSSAsGpBRdWU8Pn5jJUBC0HApxarqQaEJxm:aSAsGpcjx9ACKAjCJxm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH cc362a37f67c5b096afb52d4b7ed28c1
SHA256 5a5fdf00d2ed5e84a44c438521c623f61526931de8ed806d49f56af0d0fbb46b
MD5 5cd0ae9fb4232e080746e8a6a24703b8
SHA1 e16c9208a0452988c0444ab313ac9bce75dce999
SHA512 42ad294670adfbc2d1dac7c5767e3a746c062d57cd8e77172def11c31911589bb02e2fbc2282f9f405544ec57f36c34f5573d8ec274469810c5ed149ee3f0d74
SSDEEP 6144:+aSSAsGpBRdWU8Pn5jJUBC0HApxarqQaEJxm:aSAsGpcjx9ACKAjCJxm
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22671

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleInputW GetConsoleAliasesLengthW AllocConsole lstrcpynA GetConsoleAliasExesLengthA HeapAlloc InterlockedIncrement OpenJobObjectA InterlockedDecrement GetNamedPipeHandleStateA GetUserDefaultLCID FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetCurrentThread GetWindowsDirectoryA GetConsoleAliasExesW WaitNamedPipeW GetCommandLineA GetPriorityClass GetVolumePathNameW GetPrivateProfileIntA SetFileShortNameW _hread GetCalendarInfoW CreateEventA LeaveCriticalSection GetFileAttributesA CreateSemaphoreA WriteConsoleW GetCompressedFileSizeA QueryInformationJobObject CompareStringW lstrlenW GetTempFileNameW SetThreadPriority CreateMailslotW DeleteFiber GetCPInfoExW GetLastError GetProcAddress HeapSize RemoveDirectoryA SearchPathA SetFileAttributesA OpenWaitableTimerA LoadLibraryA LocalAlloc MoveFileA GetNumberFormatW BeginUpdateResourceA AddAtomA OpenJobObjectW GetPrivateProfileSectionNamesA GetModuleHandleA FindNextFileW GetStringTypeW GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW GetCPInfoExA SetCalendarInfoA GetVersionExA GetFileInformationByHandle DebugBreak ReadConsoleOutputCharacterW OpenFileMappingA lstrcpyW DeleteFileA LocalFileTimeToFileTime FindNextVolumeMountPointW GetVolumeNameForVolumeMountPointA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection EncodePointer DecodePointer WideCharToMultiByte HeapSetInformation GetStartupInfoW HeapFree RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer CloseHandle RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW HeapReAlloc ReadFile CreateFileW

advapi32

ReadEventLogW

Sharing