file[.]exe | Triage™

General

Target
file.exe
Size 350KB
Sample230723-dn17psdb78
SHA256 c96153ded15fb3782e6a02dd68aacda1d37b9f66dce2bcc70a69d3545db21b81
MD5 6f0774089c6cc16d2d0e63eaebe84dd2
SHA1 b64a745494762fce70f160d5c71fe5c06fd84fb9
SHA512 fcbc07d1b4ea2409cf6e2b8e30b10fff94ad491f6b1d14e47a4eca5d82cf402c79ff4ce5331834155f7208cb4f4fb6da36158f233924ef98552ccbee19687e66
SSDEEP 6144:mlK8gah/S51FzGkXdneOPFur3saHVQEr5Nr3:aK8hRS51oqIO0rRHVQENN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 350KB

file.exe

IMPHASH cfbfd8ca3fe61cf1ac99b7bb15f4a1e5
SHA256 c96153ded15fb3782e6a02dd68aacda1d37b9f66dce2bcc70a69d3545db21b81
MD5 6f0774089c6cc16d2d0e63eaebe84dd2
SHA1 b64a745494762fce70f160d5c71fe5c06fd84fb9
SHA512 fcbc07d1b4ea2409cf6e2b8e30b10fff94ad491f6b1d14e47a4eca5d82cf402c79ff4ce5331834155f7208cb4f4fb6da36158f233924ef98552ccbee19687e66
SSDEEP 6144:mlK8gah/S51FzGkXdneOPFur3saHVQEr5Nr3:aK8hRS51oqIO0rRHVQENN
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26106

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetPrivateProfileSectionNamesW SetDefaultCommConfigA GetConsoleAliasesLengthW _llseek DeleteVolumeMountPointA InterlockedIncrement MoveFileExW GetConsoleAliasA GetProfileStringW SetComputerNameW GetComputerNameW FlushConsoleInputBuffer OpenSemaphoreA BackupSeek FreeEnvironmentStringsA _lcreat GetModuleHandleW CreateNamedPipeW GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA OpenProcess GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleAliasExesLengthW GetTimeFormatW TerminateProcess GetOverlappedResult CreateMailslotW GetShortPathNameA GetNamedPipeHandleStateW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress HeapSize MoveFileW _hwrite OpenWaitableTimerA MoveFileA BuildCommDCBAndTimeoutsW SetConsoleCtrlHandler GetPrivateProfileStructA FindNextFileA GetModuleHandleA UpdateResourceW FreeEnvironmentStringsW GetStringTypeW FatalAppExitA SetFileShortNameA ReadConsoleInputW GetVersion FindFirstVolumeW DeleteFileW CreateFileW CloseHandle ReadFile InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc WideCharToMultiByte MultiByteToWideChar HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree RtlUnwind SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetModuleFileNameW HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleW DeleteFileA

user32

CharUpperA CharUpperBuffW

Sharing