file[.]exe | Triage™

General

Target
file.exe
Size 456KB
Sample230716-nwp5hsfe4s
SHA256 fe6fe64afb9a16c6ed919933916fd39c31ad8628fb2e826e43764b235d511ab4
MD5 d24fe764b9678e28562a7cf69c1049b8
SHA1 bffc013ca0e08dc45ae21eadaba221148215aa5f
SHA512 08efb111b072b24b8870a9a98396539ff8e537e1b589d612189e9287c649310497e5a3e9f1efc65ef9d17f903b3cd5747abb97aeee4dbe429b1b428247ae8024
SSDEEP 6144:BLVPaUPKsFU7tzzsfee6TBILOCkSuPJoWYxMuqYeCwoy5FIUFG:BJPaUZFU5z4f/YILuBbvi65ZF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 456KB

file.exe

IMPHASH 326441378ca815656cabd6c06990bf3c
SHA256 fe6fe64afb9a16c6ed919933916fd39c31ad8628fb2e826e43764b235d511ab4
MD5 d24fe764b9678e28562a7cf69c1049b8
SHA1 bffc013ca0e08dc45ae21eadaba221148215aa5f
SHA512 08efb111b072b24b8870a9a98396539ff8e537e1b589d612189e9287c649310497e5a3e9f1efc65ef9d17f903b3cd5747abb97aeee4dbe429b1b428247ae8024
SSDEEP 6144:BLVPaUPKsFU7tzzsfee6TBILOCkSuPJoWYxMuqYeCwoy5FIUFG:BJPaUZFU5z4f/YILuBbvi65ZF
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18427

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetupComm CreateMutexW FindResourceA EnumCalendarInfoA GetConsoleAliasesLengthW EnumDateFormatsExW GetProfileIntW AddConsoleAliasW GetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesA GlobalAlloc LoadLibraryW ReadConsoleInputA CopyFileW ReadFile GetVolumePathNameA lstrlenW DisconnectNamedPipe SetCurrentDirectoryA GetLastError SetLastError GetProcAddress BeginUpdateResourceW IsValidCodePage EnumSystemCodePagesW LoadLibraryA OpenMutexA lstrcmpiW SetLocaleInfoW CreateMutexA SetProcessShutdownParameters _lopen SetFileShortNameA GetVersionExA GetWindowsDirectoryW FileTimeToLocalFileTime AddConsoleAliasA CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers LCMapStringW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree MultiByteToWideChar ExitProcess GetStartupInfoW RtlUnwind RaiseException WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA

user32

EnumDesktopWindows CharToOemBuffA CharUpperBuffW GetMenuBarInfo CharLowerBuffW UnhookWinEvent DdeQueryStringW CharUpperBuffA LoadMenuW LoadBitmapW SetClipboardViewer

Sharing