file[.]exe | Triage™

General

Target
file.exe
Size 353KB
Sample230719-1lfvbabd26
SHA256 4b821e183fd57320849d7999495a583e0a74ee4bcffd59daefae37534f736393
MD5 3c4065e9ac7ff4350d190dcda4cd6b33
SHA1 6e26a2a9d9f5e7988f148b9cf270e3972cf0a922
SHA512 ea4dbe71f057ff75a54bb5ba27b32a935f320defefbfe75888fe962479b3975d7e8f5be9579b69669f9c1a562cb324a1932f7648fc22ba0c517f13636b971bc4
SSDEEP 6144:1I6Qt4QwsdOEcetGRU87bZQAdBSa9UsqigzSGzduirJ:It4EDVtoU8HiySadrYduC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 353KB

file.exe

IMPHASH 02f23a44e70611470e4c2107da6d7f64
SHA256 4b821e183fd57320849d7999495a583e0a74ee4bcffd59daefae37534f736393
MD5 3c4065e9ac7ff4350d190dcda4cd6b33
SHA1 6e26a2a9d9f5e7988f148b9cf270e3972cf0a922
SHA512 ea4dbe71f057ff75a54bb5ba27b32a935f320defefbfe75888fe962479b3975d7e8f5be9579b69669f9c1a562cb324a1932f7648fc22ba0c517f13636b971bc4
SSDEEP 6144:1I6Qt4QwsdOEcetGRU87bZQAdBSa9UsqigzSGzduirJ:It4EDVtoU8HiySadrYduC
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21379

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement OpenSemaphoreA BackupSeek FreeEnvironmentStringsA _lclose GetModuleHandleW GetConsoleAliasesLengthA GetNumberFormatA GetConsoleAliasExesW WaitNamedPipeW GetCommandLineA GetVolumePathNameW GlobalAlloc SetFileShortNameW LoadLibraryW FatalAppExitW GetPrivateProfileStructW GetVersionExW DeleteVolumeMountPointW SetConsoleCursorPosition TerminateProcess GetCompressedFileSizeA GetOverlappedResult GetShortPathNameA GetNamedPipeHandleStateW GetPrivateProfileIntW GetLastError GetConsoleAliasExesLengthA ReadConsoleOutputCharacterA GetProcAddress HeapSize MoveFileW RemoveDirectoryA SetStdHandle OpenWaitableTimerW LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW GetProfileStringA FoldStringA FindNextFileA EnumDateFormatsA _lread CreateMailslotA GetStringTypeW GetCurrentDirectoryA PeekConsoleInputA DeleteCriticalSection SetCalendarInfoA ReadConsoleInputW GetWindowsDirectoryW FindFirstVolumeW GetConsoleProcessList CloseHandle CreateFileW ReadFile _llseek GetFileSize AllocConsole SetLastError GetPrivateProfileSectionNamesW InterlockedDecrement Sleep InitializeCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer MoveFileA WideCharToMultiByte HeapFree HeapAlloc ExitProcess MultiByteToWideChar HeapReAlloc HeapSetInformation GetStartupInfoW RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount RaiseException GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode LCMapStringW WriteConsoleW FlushFileBuffers DeleteFileA

user32

CharUpperW CharUpperBuffW

gdi32

GetCharWidthA GetCharWidthFloatW

advapi32

ReadEventLogA

Sharing