file[.]exe | Triage™

General

Target
file.exe
Size 441KB
Sample230726-nxaffsbb55
SHA256 680fa23ffd5f8185eb50f54932becc71d2d3b51b39033f853c4ea2e8737e34f0
MD5 1aaa434406dfe8a9f9832cef05c224f0
SHA1 3394604f1168eb67a2d6b0d151b71d05ce7d79fb
SHA512 68d65fe676d6f7ef71e01da69d3add76e54ced23939019151eecf7eead609eba22b24278317daeb1131f6162656eb05ebc153981c275c37f10454c43a90f4acb
SSDEEP 6144:qlUgLNFhK7YQ/FJF6MQgyuvckovIwk27Sjv+HT:AUgpFhKcQLF6zLuExDSjmz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 441KB

file.exe

IMPHASH 28e47df11fcc31ecc5eec0c4cd0746c2
SHA256 680fa23ffd5f8185eb50f54932becc71d2d3b51b39033f853c4ea2e8737e34f0
MD5 1aaa434406dfe8a9f9832cef05c224f0
SHA1 3394604f1168eb67a2d6b0d151b71d05ce7d79fb
SHA512 68d65fe676d6f7ef71e01da69d3add76e54ced23939019151eecf7eead609eba22b24278317daeb1131f6162656eb05ebc153981c275c37f10454c43a90f4acb
SSDEEP 6144:qlUgLNFhK7YQ/FJF6MQgyuvckovIwk27Sjv+HT:AUgpFhKcQLF6zLuExDSjmz
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23714

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW FindResourceA GetConsoleAliasesLengthW GetProfileIntW CompareFileTime SetConsoleScreenBufferSize AddConsoleAliasW GetComputerNameW GetTickCount GetConsoleAliasesLengthA GlobalAlloc SetFileShortNameW LoadLibraryW GetLocaleInfoW FreeConsole CreateEventA EnumSystemCodePagesA GetGeoInfoA ReadFile DisconnectNamedPipe GetConsoleAliasesW SetLastError lstrcmpiA GetProcAddress VirtualAlloc LoadLibraryA CreateMutexA FatalAppExitA _lopen ReadConsoleInputW GetWindowsDirectoryW GlobalAddAtomW CreateFileA SetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

LoadMenuW CharLowerBuffA CharUpperBuffA

Sharing