file[.]exe | Triage™

General

Target
file.exe
Size 251KB
Sample230714-tagtxafa64
SHA256 4726f703d20686183cf84175978a96b4e411f472073c802a76ce903ab67ff50f
MD5 6f64a255a172fe4739b2c04575c45aab
SHA1 43dbb8499171efb6112283599369c57a359002f9
SHA512 f0eb3f18c9dc8538727f44b25d58f5a53945020f98107dc80ed695bc5863f1698aa21b6d00818fe775e8d63be9ee665916cd15e9ef08bece7c299b5a8ea72c6c
SSDEEP 3072:NKLdx4vEYJTaalv90UYQqvSHFsA2ZBcf6JLbVlOlJH2rEiPml4ZiJDRIgPYGViQd:ILdG5J7lqKwZJLXOl0mKcIPGkTc1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 251KB

file.exe

IMPHASH ba16f29121f16f7f252e653fd6dc7741
SHA256 4726f703d20686183cf84175978a96b4e411f472073c802a76ce903ab67ff50f
MD5 6f64a255a172fe4739b2c04575c45aab
SHA1 43dbb8499171efb6112283599369c57a359002f9
SHA512 f0eb3f18c9dc8538727f44b25d58f5a53945020f98107dc80ed695bc5863f1698aa21b6d00818fe775e8d63be9ee665916cd15e9ef08bece7c299b5a8ea72c6c
SSDEEP 3072:NKLdx4vEYJTaalv90UYQqvSHFsA2ZBcf6JLbVlOlJH2rEiPml4ZiJDRIgPYGViQd:ILdG5J7lqKwZJLXOl0mKcIPGkTc1
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17993

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA SetLocaleInfoA EnumCalendarInfoA GetConsoleAliasesLengthW EnumDateFormatsExW SetTapeParameters GetModuleHandleW GetTickCount GetWindowsDirectoryA GetVolumePathNameW GlobalAlloc LoadLibraryW ReadConsoleInputA CopyFileW EnumSystemCodePagesA ReadFile DisconnectNamedPipe GetConsoleAliasesW GetProfileIntA SetCurrentDirectoryA GetLastError CreateMutexW GetProcAddress LoadLibraryA OpenMutexA CreateHardLinkW BeginUpdateResourceA lstrcmpiW CreateMutexA VirtualProtect GetVersionExA FileTimeToLocalFileTime AddConsoleAliasA lstrcpyA CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers SetLastError GetComputerNameA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar ExitProcess GetStartupInfoW HeapFree RtlUnwind RaiseException WriteFile GetStdHandle GetModuleFileNameA HeapAlloc SetHandleCount GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW

user32

CharToOemBuffA RealGetWindowClassW GetMenuBarInfo LoadMenuA CharUpperA CharLowerBuffW CharUpperBuffA DdeQueryStringA SetClipboardViewer

advapi32

LogonUserA

Sharing