file[.]exe | Triage™

General

Target
file.exe
Size 353KB
Sample230726-pp2qeabc74
SHA256 2a7ccf835cd47e53b218d02824e1db7194aa045271d10a049647528a865c723f
MD5 5487be4ca04d8c00ff0c83212641e413
SHA1 96cf0a0f58eeade0214a1d646de18a3a788b067f
SHA512 e35ca60c607520cb80ca18c648981b0241f69c5662dd4e5945957008f7b34fb7f485d8e571bfac73dc18c0c1935622dd2d5c7f705af59db18acd52ba04aebb90
SSDEEP 3072:SbYvr6FPL2gVUDOkOSY/30U8JxVHlSUKDZInLF8Z0a+5g91RhwlGvPGT1lTU0:SYGFPL2gK+OH2DyLF6Z97hjv+HT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 353KB

file.exe

IMPHASH 23b1f12acfdc16a0095d4f2599c53eaf
SHA256 2a7ccf835cd47e53b218d02824e1db7194aa045271d10a049647528a865c723f
MD5 5487be4ca04d8c00ff0c83212641e413
SHA1 96cf0a0f58eeade0214a1d646de18a3a788b067f
SHA512 e35ca60c607520cb80ca18c648981b0241f69c5662dd4e5945957008f7b34fb7f485d8e571bfac73dc18c0c1935622dd2d5c7f705af59db18acd52ba04aebb90
SSDEEP 3072:SbYvr6FPL2gVUDOkOSY/30U8JxVHlSUKDZInLF8Z0a+5g91RhwlGvPGT1lTU0:SYGFPL2gK+OH2DyLF6Z97hjv+HT
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23714

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW FindResourceA GetConsoleAliasesLengthW AllocConsole GetProfileIntW GlobalAddAtomA CompareFileTime AddConsoleAliasW GetComputerNameW GetTickCount GetConsoleAliasesA GetConsoleAliasesLengthA GlobalAlloc SetFileShortNameW LoadLibraryW GetLocaleInfoW CreateEventA EnumSystemCodePagesA SetConsoleCursorPosition GetGeoInfoA ReadFile DisconnectNamedPipe GetLastError SetLastError lstrcmpiA GetProcAddress VirtualAlloc LoadLibraryA CreateMutexA FatalAppExitA _lopen ReadConsoleInputW GetWindowsDirectoryW CreateFileA SetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

LoadMenuW CharLowerBuffA CharUpperBuffA

Sharing