file[.]exe | Triage™

General

Target
file.exe
Size 163KB
Sample230714-3av6zagd39
SHA256 b9306a1ff3a02986f4b71b996d129f7db35002d46a1d09b56faf23bc37d14577
MD5 82d4b991fce24120eca1c0a4676be9b9
SHA1 278fa5df75b600c6bfe1f8713022c9b826636347
SHA512 b9d264c3aa84456bbe2224be5189968ab485debaa1c23f17b8737d077277482765b98814bdb4e7dde1acb593702905a0f58608138421e786122a5bad1e2142c0
SSDEEP 1536:kjtZnulNy7aWHWL1GZ09+ShK4nKECDyTRWXXKOmWqixI6HYXzwgykZSXmhsDyWZr:kaLyShK4KECmVWHVm/GI7RlIW0T5wl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 163KB

file.exe

IMPHASH 009b850709316fcb65c2441a3f1ce5ba
SHA256 b9306a1ff3a02986f4b71b996d129f7db35002d46a1d09b56faf23bc37d14577
MD5 82d4b991fce24120eca1c0a4676be9b9
SHA1 278fa5df75b600c6bfe1f8713022c9b826636347
SHA512 b9d264c3aa84456bbe2224be5189968ab485debaa1c23f17b8737d077277482765b98814bdb4e7dde1acb593702905a0f58608138421e786122a5bad1e2142c0
SSDEEP 1536:kjtZnulNy7aWHWL1GZ09+ShK4nKECDyTRWXXKOmWqixI6HYXzwgykZSXmhsDyWZr:kaLyShK4KECmVWHVm/GI7RlIW0T5wl
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18135

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA SetLocaleInfoA EnumCalendarInfoA GetConsoleAliasesLengthW EnumDateFormatsExW SetTapeParameters GetModuleHandleW GetTickCount GetWindowsDirectoryA GlobalAlloc LoadLibraryW ReadConsoleInputA CopyFileW EnumSystemCodePagesA ReadFile GetVolumePathNameA DisconnectNamedPipe GetConsoleAliasesW GetProfileIntA SetCurrentDirectoryA GetLastError CreateMutexW GetProcAddress LoadLibraryA OpenMutexA CreateHardLinkW BeginUpdateResourceA lstrcmpiW CreateMutexA VirtualProtect GetVersionExA FileTimeToLocalFileTime AddConsoleAliasA lstrcpyA CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers SetLastError GetComputerNameA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree MultiByteToWideChar ExitProcess GetStartupInfoW RtlUnwind RaiseException WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW

user32

CharToOemBuffA RealGetWindowClassW GetMenuBarInfo LoadMenuA CharUpperA CharLowerBuffW CharUpperBuffA DdeQueryStringA SetClipboardViewer

advapi32

LogonUserA

Sharing