file[.]exe | Triage™

General

Target
file.exe
Size 320KB
Sample230713-txhdysac41
SHA256 239a4626ed96608fc7d5c5a84bd05cb547b222b103ca17eeaab7ea45c3f3ff22
MD5 55237d09521a11a8182c4947dee3826b
SHA1 d5333b8f348807192b29fb3e58d13f3135047ae0
SHA512 6047ef677d538f54cd354bcd2c0b7b5c2d6863da49096289552aba0376f5f5ffa627bd659b0e193bb7b5618ad370880a3c4a0292e9a241129e939526d8bf0063
SSDEEP 6144:Zs7VzD6tpfOG+H8T5hfEfzxlg9w9/MzfyB:ZOVf6X4Hk5RErxPUzfy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 320KB

file.exe

IMPHASH ec25fad0b469bd3fa9e613cebadc5fbe
SHA256 239a4626ed96608fc7d5c5a84bd05cb547b222b103ca17eeaab7ea45c3f3ff22
MD5 55237d09521a11a8182c4947dee3826b
SHA1 d5333b8f348807192b29fb3e58d13f3135047ae0
SHA512 6047ef677d538f54cd354bcd2c0b7b5c2d6863da49096289552aba0376f5f5ffa627bd659b0e193bb7b5618ad370880a3c4a0292e9a241129e939526d8bf0063
SSDEEP 6144:Zs7VzD6tpfOG+H8T5hfEfzxlg9w9/MzfyB:ZOVf6X4Hk5RErxPUzfy
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21780

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA AllocConsole lstrcpynA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA DeleteVolumeMountPointA InterlockedIncrement OpenJobObjectA WaitNamedPipeA HeapFree GetProfileStringW GetUserDefaultLCID WriteConsoleInputA BackupSeek GetModuleHandleW UnlockFileEx FindNextVolumeMountPointA GetConsoleAliasesLengthA GetNumberFormatA GetCompressedFileSizeW GetUserDefaultLangID GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA SetFileShortNameW LoadLibraryW GetVersionExW GetStringTypeExW lstrlenW VirtualUnlock GetShortPathNameA GetNamedPipeHandleStateW EnumSystemLocalesA GetCommandLineW SetLastError ReadConsoleOutputCharacterA GetProcAddress MoveFileW RemoveDirectoryA EnterCriticalSection CreateSemaphoreW WriteConsoleA OpenWaitableTimerW LocalAlloc GetFileType AddAtomW GetPrivateProfileSectionNamesA FindNextFileA CreateIoCompletionPort _lread FreeEnvironmentStringsW GetCurrentDirectoryA EnumDateFormatsW PeekConsoleInputA SetCalendarInfoA FindFirstVolumeA ReadConsoleInputW TerminateJobObject GetWindowsDirectoryW MoveFileWithProgressW GetConsoleProcessList DeleteFileA lstrcpyA CloseHandle CreateFileW WriteConsoleW GetVolumeNameForVolumeMountPointA GetLastError SetStdHandle LCMapStringW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EncodePointer DecodePointer MoveFileA HeapAlloc HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize RaiseException GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

CharUpperBuffW GetMessagePos

gdi32

GetCharWidthW

winhttp

WinHttpGetProxyForUrl

Sharing