file[.]exe | Triage™

General

Target
file.exe
Size 469KB
Sample230804-v2jy1sec8v
SHA256 2caeda0d4db1d749030beaeb046e6701dba2983899f00887d1ecd67f1e65baec
MD5 9bc7e1244b18640069f2a2b7ebdc80d0
SHA1 b896b032cba16396b8dce6888d7a1af1b6963a50
SHA512 3ef59663bad26d72964b8066250e3fb4a9549aaa662f8be4b6379b88736a3cde0436e0150b8ebeb94da5fed303442e339e495b2c176ae822042abf4fd3f2c2bb
SSDEEP 6144:G/E7HxHEAeRLKqLcJqcacgm2rLKRlwSSVL8RSqdSpapBbN:G/GHxHE+1q/mmeSVL8RR68B
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 469KB

file.exe

IMPHASH e9d58d04128ce66edda6debd8a6afcde
SHA256 2caeda0d4db1d749030beaeb046e6701dba2983899f00887d1ecd67f1e65baec
MD5 9bc7e1244b18640069f2a2b7ebdc80d0
SHA1 b896b032cba16396b8dce6888d7a1af1b6963a50
SHA512 3ef59663bad26d72964b8066250e3fb4a9549aaa662f8be4b6379b88736a3cde0436e0150b8ebeb94da5fed303442e339e495b2c176ae822042abf4fd3f2c2bb
SSDEEP 6144:G/E7HxHEAeRLKqLcJqcacgm2rLKRlwSSVL8RSqdSpapBbN:G/GHxHE+1q/mmeSVL8RR68B
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22701

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW SetInformationJobObject GetConsoleAliasExesA ConvertThreadToFiber GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA InterlockedIncrement MoveFileExW GetConsoleAliasA GetSystemWindowsDirectoryW HeapFree FlushConsoleInputBuffer OpenSemaphoreA GetSystemDefaultLCID FreeEnvironmentStringsA _lclose VirtualFree GenerateConsoleCtrlEvent GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA WaitNamedPipeW EnumTimeFormatsW GetUserDefaultLangID GetCommandLineA GetDriveTypeA GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetConsoleMode _hread GetPrivateProfileStructW GetCalendarInfoA DeleteVolumeMountPointW GetFileAttributesA GetTimeFormatW WritePrivateProfileSectionW SetProcessAffinityMask CreateMailslotW GetNamedPipeHandleStateW InterlockedExchange GetHandleInformation GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW SetLastError GetProcAddress BackupWrite MoveFileW SetComputerNameA OpenWaitableTimerA OpenMutexA InterlockedExchangeAdd LocalAlloc GetFileType AddAtomW SetCurrentDirectoryW GetProfileStringA GlobalGetAtomNameW FindNextFileA CreateIoCompletionPort GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW PeekConsoleInputA FindFirstVolumeA ReadConsoleInputW LocalSize GetVolumeNameForVolumeMountPointW DeleteFileW ReadConsoleOutputCharacterW OpenFileMappingA EnumSystemLocalesW HeapReAlloc GetCommandLineW GetComputerNameA GetStartupInfoW ExitProcess InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc DeleteFileA HeapSetInformation RaiseException RtlUnwind IsProcessorFeaturePresent HeapCreate GetModuleHandleW WriteFile GetStdHandle GetModuleFileNameW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar LCMapStringW

user32

CharUpperA

gdi32

GetTextFaceA

advapi32

AccessCheckByTypeResultList

Sharing