file[.]exe | Triage™

General

Target
file.exe
Size 1.2MB
Sample230703-jxpg6afe66
SHA256 58a7d4f557e04cf695287a1521069f4008c0f451d524037e6ae20b3089d2be74
MD5 abc8ad6946808c33d794bd553b7e1657
SHA1 a95363691981e04f6aff00c2a95972f4a74908b1
SHA512 d589eebd73e07a6bb873544d51f0618731688409a09f44bcc1a345c3490a7b60086bd23a02b922cd48323e9132336fa9ca45b531ea49f217497610d810ddefe1
SSDEEP 6144:sywKlkwrO7P+UMrwgz5CAOjMp5FxZjs6igVc/Wj6JrbgRK76O:sjGkwrO7PUNCxYv1/6dys
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 1.2MB

file.exe

IMPHASH 9b8bc88ec2effd02d5a41d9eb86ed569
SHA256 58a7d4f557e04cf695287a1521069f4008c0f451d524037e6ae20b3089d2be74
MD5 abc8ad6946808c33d794bd553b7e1657
SHA1 a95363691981e04f6aff00c2a95972f4a74908b1
SHA512 d589eebd73e07a6bb873544d51f0618731688409a09f44bcc1a345c3490a7b60086bd23a02b922cd48323e9132336fa9ca45b531ea49f217497610d810ddefe1
SSDEEP 6144:sywKlkwrO7P+UMrwgz5CAOjMp5FxZjs6igVc/Wj6JrbgRK76O:sjGkwrO7PUNCxYv1/6dys
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51249

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

Rectangle GetDCBrushColor GetViewportExtEx

ole32

CoGetApartmentType CoGetObjectContext

kernel32

CreateFileW HeapSize ReadConsoleW GetModuleHandleA FreeConsole GetModuleHandleW RaiseException GetCurrentThreadId IsProcessorFeaturePresent GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW MultiByteToWideChar InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW InitOnceComplete InitOnceBeginInitialize GetStringTypeW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WideCharToMultiByte CloseHandle WaitForSingleObjectEx QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetProcAddress GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead SetStdHandle RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap WriteConsoleW

Sharing