file[.]exe | Triage™

General

Target
file.exe
Size 270KB
Sample230704-prrm8aed9x
SHA256 665a12c39806edc87811291d7c054ccd07ada0f7da775cf90b6473b2a4457586
MD5 47e16098ab08003fd0db64f6ca3e904f
SHA1 8dab24acfd5a66a583166c28b2973c9ddb72e778
SHA512 0802c74014b731dbab24dcd8e9f47e28164c7a2d4f9a3f013cf7d0c613b4c47f2b95d9a8cbc50fff1b9762fc3ed1abd1b11350f8463c78fa5638aae383370cdc
SSDEEP 6144:DiPFRETmS8RgpTA23vLgRnYFdlQmMOj6YWBEB:DiPFREx8mr3vYYFdlQmMOj6Y2C
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 270KB

file.exe

IMPHASH 50bae82ac39e11f748d509058504a379
SHA256 665a12c39806edc87811291d7c054ccd07ada0f7da775cf90b6473b2a4457586
MD5 47e16098ab08003fd0db64f6ca3e904f
SHA1 8dab24acfd5a66a583166c28b2973c9ddb72e778
SHA512 0802c74014b731dbab24dcd8e9f47e28164c7a2d4f9a3f013cf7d0c613b4c47f2b95d9a8cbc50fff1b9762fc3ed1abd1b11350f8463c78fa5638aae383370cdc
SSDEEP 6144:DiPFRETmS8RgpTA23vLgRnYFdlQmMOj6YWBEB:DiPFREx8mr3vYYFdlQmMOj6Y2C
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14531

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle GetLastError WaitForSingleObject CreateMutexW Sleep CreateThread VirtualAlloc VirtualProtect GetModuleHandleA GetProcAddress LoadLibraryA lstrlenW FreeConsole WriteConsoleW CreateFileW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx DecodePointer

user32

SetClipboardViewer

Sharing