file[.]exe | Triage™

General

Target
file.exe
Size 400KB
Sample230809-vtn8rsfd2y
SHA256 690206b7cf8cb74aa8c1d253d94e5fc8d9ca8944e433aa9302e092c028fcc0fb
MD5 605fe312cfa3a6adb3dcd14fa7062b48
SHA1 7f92404e36769a16b1f34bce69de1bcf5a070edd
SHA512 d8b4b1de2641e291105c4c8e9be71983e66effde0a99c991644d5304bfe4623be4d6b7b456c1f97ccdf7ebc63980dc0a514219ac5e73382643086bcb8ce5344a
SSDEEP 6144:IRZzQcLpOmZAXmiXQSNQyuS8RJnUu1kbbX4NJU+ct5iz8SR7K:IRj1ZAX/Tub+u1kapX7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 400KB

file.exe

IMPHASH 21e75c39e5b8b26ccac618e4f1755b8e
SHA256 690206b7cf8cb74aa8c1d253d94e5fc8d9ca8944e433aa9302e092c028fcc0fb
MD5 605fe312cfa3a6adb3dcd14fa7062b48
SHA1 7f92404e36769a16b1f34bce69de1bcf5a070edd
SHA512 d8b4b1de2641e291105c4c8e9be71983e66effde0a99c991644d5304bfe4623be4d6b7b456c1f97ccdf7ebc63980dc0a514219ac5e73382643086bcb8ce5344a
SSDEEP 6144:IRZzQcLpOmZAXmiXQSNQyuS8RJnUu1kbbX4NJU+ct5iz8SR7K:IRj1ZAX/Tub+u1kapX7
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28367

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA GetLocaleInfoA InterlockedDecrement InterlockedCompareExchange SetCommBreak ConnectNamedPipe GetModuleHandleW GetTickCount GetCurrentThread GetConsoleAliasesA ReadConsoleOutputA GetDateFormatA LoadLibraryW ReadConsoleInputA TransactNamedPipe GetNamedPipeInfo CreateActCtxA DisconnectNamedPipe GetConsoleAliasesW GetProfileIntA GetLastError GetProcAddress VirtualAlloc HeapSize SearchPathA SetFileApisToANSI FoldStringW EnumResourceTypesW GetOEMCP HeapSetInformation UpdateResourceW CancelTimerQueueTimer Module32Next TlsAlloc WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar ExitProcess GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetACP IsValidCodePage WriteFile GetStdHandle GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW CloseHandle CreateFileA GetModuleHandleA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle SetEndOfFile GetProcessHeap

user32

LoadMenuA CreateAcceleratorTableA CharLowerBuffA CharToOemBuffW CharUpperBuffW

Sharing