file[.]exe | Triage™

General

Target
file.exe
Size 358KB
Sample230723-ncj46adh68
SHA256 883e13b0ee3b095b37bf146fa5d4f0dc428bb68daca717e98f28c769cde5c7dd
MD5 3d39b4eeb4cd35c2604a8594d15fecaa
SHA1 fb500ad1cce2b7ddb171ab07878da29449ef4744
SHA512 1977b89fd1c58f2af75fc82fb71314d2cb14efdaca099de9fac8133d0ad4c1d7cffb7b72a9b9c8b811f4c4a5e6d2df90cbfa85c0fcad54181b233ac63d502aa9
SSDEEP 6144:wnkN0phoVNdKaJJjnzaLGnN5CRfciXiJYGtA+0Kc:y5aVnKaJVeLGNsRkikYGtP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 358KB

file.exe

IMPHASH 36da5bb4dfd8ed791010d83958f8dea5
SHA256 883e13b0ee3b095b37bf146fa5d4f0dc428bb68daca717e98f28c769cde5c7dd
MD5 3d39b4eeb4cd35c2604a8594d15fecaa
SHA1 fb500ad1cce2b7ddb171ab07878da29449ef4744
SHA512 1977b89fd1c58f2af75fc82fb71314d2cb14efdaca099de9fac8133d0ad4c1d7cffb7b72a9b9c8b811f4c4a5e6d2df90cbfa85c0fcad54181b233ac63d502aa9
SSDEEP 6144:wnkN0phoVNdKaJJjnzaLGnN5CRfciXiJYGtA+0Kc:y5aVnKaJVeLGNsRkikYGtP
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25992

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetConsoleAliasesLengthW MoveFileExA BuildCommDCBAndTimeoutsA DeleteVolumeMountPointA InterlockedIncrement GetConsoleAliasA SetDefaultCommConfigW GetProfileStringW SetComputerNameW GetComputerNameW FlushConsoleInputBuffer OpenSemaphoreA BackupSeek FreeEnvironmentStringsA _lclose _lcreat GetModuleHandleW CreateNamedPipeW GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA OpenProcess GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetTimeFormatW TerminateProcess GetOverlappedResult GetShortPathNameA GetNamedPipeHandleStateW GetPrivateProfileIntW GetStartupInfoA GetLastError SetLastError GetProcAddress HeapSize _hwrite OpenWaitableTimerA MoveFileA SetConsoleCtrlHandler GetPrivateProfileStructA FindNextFileA GetModuleHandleA UpdateResourceW FreeEnvironmentStringsW CreateMailslotA GetStringTypeW GetCurrentDirectoryA FatalAppExitA GetShortPathNameW SetFileShortNameA ReadConsoleInputW GetVersion FindFirstVolumeW DeleteFileW CloseHandle ReadFile WriteConsoleW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc WideCharToMultiByte MultiByteToWideChar HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree RtlUnwind SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetModuleFileNameW HeapCreate SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringW CreateFileW

user32

CharUpperA CharUpperBuffW

Sharing