file[.]exe | Triage™

General

Target
file.exe
Size 278KB
Sample230704-vx44dsfg74
SHA256 235e46637f1767a5398e4fa30e232ffb7f75df107ba58ceefd174ee4938c27a0
MD5 81f093a69e6ce0825b8700a99664f5d3
SHA1 d95755e9101fd1a65fb162c9d4490f823ec1937f
SHA512 ed119a68051c392fde2eee76ca000e221ccd74cff356f37f39e1811d5ec1f0c950aab6299df64c3e0487008c6d0243656ab7c77589e132dc1067ce1914d2761a
SSDEEP 6144:fskLZgDoqKn1Lot4++KpVS+xUIaHMEJ6g5jajvf:fFgREozqIOkv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 278KB

file.exe

IMPHASH 73eb3bf4e3c6a0082a4a8746a058ebbf
SHA256 235e46637f1767a5398e4fa30e232ffb7f75df107ba58ceefd174ee4938c27a0
MD5 81f093a69e6ce0825b8700a99664f5d3
SHA1 d95755e9101fd1a65fb162c9d4490f823ec1937f
SHA512 ed119a68051c392fde2eee76ca000e221ccd74cff356f37f39e1811d5ec1f0c950aab6299df64c3e0487008c6d0243656ab7c77589e132dc1067ce1914d2761a
SSDEEP 6144:fskLZgDoqKn1Lot4++KpVS+xUIaHMEJ6g5jajvf:fFgREozqIOkv
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17372

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW SetLocaleInfoA GetProfileIntW DeleteVolumeMountPointA EnumCalendarInfoW GetLogicalDriveStringsW UnlockFile GetTickCount GetConsoleAliasesA GetCompressedFileSizeW ClearCommBreak GetDateFormatA FindResourceExA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetStringTypeExW FindNextVolumeW MulDiv ReplaceFileW GetVolumePathNameA GetDevicePowerState FindFirstFileA OpenMutexW GetComputerNameA lstrcmpiA GetProcAddress GetLongPathNameA BeginUpdateResourceW EnumDateFormatsExA IsValidCodePage EnumSystemCodePagesW LoadLibraryA CreateFileMappingA LocalAlloc CreateHardLinkW GetNumberFormatW SetCurrentDirectoryW SetProcessWorkingSetSize HeapWalk GetModuleHandleA ReadConsoleInputW GetWindowsDirectoryW CloseHandle CreateFileA FlushFileBuffers SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW RaiseException

user32

CharUpperBuffW GetMenuBarInfo LoadMenuA DdeQueryStringW GetClipboardOwner CharToOemBuffA

gdi32

GetCharABCWidthsI

Sharing