file[.]exe | Triage™

General

Target
file.exe
Size 368KB
Sample230801-trclhsad7y
SHA256 b805ee9e91c4716831f7f44ab17a2e58ec9f90c73be93cf7468fee62edcbc2d7
MD5 c7724948618884f5ffa37f6c8464d281
SHA1 e0a0acd0c010d3075a314b989f81f62128332a2d
SHA512 189b11c0329043ea8218fa15797b9926a56e86272a9909159d0e2c19f41b3e55ba52629a3532446b2601583bd67a233693481df1ee6cfc70efa135d938c40dcd
SSDEEP 6144:ixY97I4bLTnjMbe08UcJzNXEDdMvkWXJzSzwwr5SVjiDS:8Z4b3Abe08Ucl5gOMWdSzfr5S9i
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 368KB

file.exe

IMPHASH 01973b75f57e8667f1f1e9ca8cf396f9
SHA256 b805ee9e91c4716831f7f44ab17a2e58ec9f90c73be93cf7468fee62edcbc2d7
MD5 c7724948618884f5ffa37f6c8464d281
SHA1 e0a0acd0c010d3075a314b989f81f62128332a2d
SHA512 189b11c0329043ea8218fa15797b9926a56e86272a9909159d0e2c19f41b3e55ba52629a3532446b2601583bd67a233693481df1ee6cfc70efa135d938c40dcd
SSDEEP 6144:ixY97I4bLTnjMbe08UcJzNXEDdMvkWXJzSzwwr5SVjiDS:8Z4b3Abe08Ucl5gOMWdSzfr5S9i
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33566

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA FindResourceA lstrlenA WritePrivateProfileStructA GetConsoleAliasesLengthW PeekNamedPipe TlsGetValue AllocConsole FindResourceW HeapAlloc _lwrite InterlockedDecrement InterlockedCompareExchange FindCloseChangeNotification OpenSemaphoreA GetTickCount GetConsoleAliasesA FormatMessageA GetCompressedFileSizeW GlobalAlloc LoadLibraryW GetLocaleInfoW WriteConsoleOutputA TransactNamedPipe CreateActCtxA DisconnectNamedPipe GetDateFormatW GetLastError lstrcmpiA GetProcAddress AttachConsole VirtualAlloc CreateMemoryResourceNotification SearchPathA SetFileApisToOEM LoadLibraryA OpenMutexA DeleteTimerQueue EnumResourceTypesW GetThreadPriority GetCommTimeouts HeapSetInformation UpdateResourceW GetStringTypeW Module32NextW ReadConsoleInputW GetWindowsDirectoryW GetCurrentProcessId AddConsoleAliasA ResetWriteWatch CreateFileA SetStdHandle WriteConsoleW GetProfileIntA GetComputerNameA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapCreate VirtualFree HeapReAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

CharUpperBuffA LoadMenuW CharLowerBuffA CharToOemBuffA

advapi32

InitiateSystemShutdownA

Sharing