file[.]exe | Triage™

General

Target
file.exe
Size 384KB
Sample230712-17cd1seg65
SHA256 853621a1b8acd0226410a62db92e63dacdf23b77a7bfdb17ac87b72ea8beb1e8
MD5 d884131ee2f232c20243851bb6c73a31
SHA1 d856b986f0cb9efd2e8572403d78e3e1d2ac4df1
SHA512 5ca12107300237b306a10ca50a3ec9ae614e2be25c7743f650ec7e30c7d42b6814829425fb27c3cf184e495cb0e1dc14de0838af672019dcd6c0001f33242b72
SSDEEP 6144:EDnjLYSO7BhzLi/T7NgLGDsPa6mgXT9WLROi0VzJTyTn:SjES5TtaRii1JTCn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 384KB

file.exe

IMPHASH 43ba4f3bb542d9fa192398aeb3691ab4
SHA256 853621a1b8acd0226410a62db92e63dacdf23b77a7bfdb17ac87b72ea8beb1e8
MD5 d884131ee2f232c20243851bb6c73a31
SHA1 d856b986f0cb9efd2e8572403d78e3e1d2ac4df1
SHA512 5ca12107300237b306a10ca50a3ec9ae614e2be25c7743f650ec7e30c7d42b6814829425fb27c3cf184e495cb0e1dc14de0838af672019dcd6c0001f33242b72
SSDEEP 6144:EDnjLYSO7BhzLi/T7NgLGDsPa6mgXT9WLROi0VzJTyTn:SjES5TtaRii1JTCn
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18187

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA EnumDateFormatsExW GetSystemWindowsDirectoryW GetComputerNameW CreateHardLinkA SetTapeParameters GetModuleHandleW GetTickCount GetWindowsDirectoryA GetVolumePathNameW FindResourceExA LoadLibraryW ReadConsoleInputA _hread EnumSystemCodePagesA DisconnectNamedPipe FlushFileBuffers GetConsoleAliasesW GetProfileIntA SetCurrentDirectoryA FindFirstFileA OpenMutexW FindResourceA SetLastError lstrcmpiA GetProcAddress BeginUpdateResourceW CopyFileA LoadLibraryA LocalAlloc SetProcessWorkingSetSize SetLocaleInfoW HeapSetInformation CreateMutexA VirtualProtect GetVersionExA FileTimeToLocalFileTime lstrcpyA CloseHandle CreateFileA GetModuleHandleA WriteConsoleW GetConsoleOutputCP GetLastError CreateMutexW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW HeapFree RtlUnwind RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA

user32

GetMenuBarInfo CharLowerBuffW CharUpperBuffA DdeQueryStringA GetClipboardOwner CharToOemBuffA

advapi32

LogonUserW

Sharing