file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample230821-scqddsfb9t
SHA256 696b6607853c35bf80ba50b4784cf28234686f6152750c5ed42c6596ea3f8775
MD5 ea574dde100b38b040b422c37ef6814b
SHA1 e29a978f7c4c225d37ddc87a2a0ba82d23eb99ba
SHA512 b1f0d8aa87c364485fa86fe88c50d982300627f2c354280c29e3ad9a0eda6d39550e3699ad132fc67533ee56984b0ff567694e4fe7ec6d287e72b03e80428697
SSDEEP 6144:37enmv0Vl/GA0cegen5xpLdP8D9zJLx9o1FXOFHBCi:37Ck0VVGAHQ5fd8DPl9EFqHBx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH 1ce217138c8d71ee8a89ab6f1921ee72
SHA256 696b6607853c35bf80ba50b4784cf28234686f6152750c5ed42c6596ea3f8775
MD5 ea574dde100b38b040b422c37ef6814b
SHA1 e29a978f7c4c225d37ddc87a2a0ba82d23eb99ba
SHA512 b1f0d8aa87c364485fa86fe88c50d982300627f2c354280c29e3ad9a0eda6d39550e3699ad132fc67533ee56984b0ff567694e4fe7ec6d287e72b03e80428697
SSDEEP 6144:37enmv0Vl/GA0cegen5xpLdP8D9zJLx9o1FXOFHBCi:37Ck0VVGAHQ5fd8DPl9EFqHBx
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14312

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BuildCommDCBAndTimeoutsA EndUpdateResourceW SetConsoleTextAttribute OpenJobObjectA InterlockedDecrement GetCurrentProcess QueryPerformanceCounter SetHandleInformation GetProfileStringW GetTimeFormatA OpenSemaphoreA GetSystemDefaultLCID FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetWindowsDirectoryA WaitNamedPipeW EnumTimeFormatsW GetCommandLineA GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleMode ReadConsoleInputA _hread GetSystemWindowsDirectoryA SetConsoleCP DeleteVolumeMountPointW GetExitCodeProcess GetConsoleAliasW SetConsoleCursorPosition GetFileAttributesW lstrcatA GetStartupInfoW GetConsoleAliasExesLengthA EnumSystemLocalesA InterlockedExchange GetStartupInfoA FindFirstFileA OpenMutexW GetCurrentDirectoryW SetLastError GetProcAddress MoveFileW GlobalGetAtomNameA OpenWaitableTimerA LoadLibraryA InterlockedExchangeAdd GetFileType MoveFileA GetNumberFormatW GetPrivateProfileSectionNamesA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW CreateMailslotA EnumDateFormatsW PeekConsoleInputA SetCalendarInfoA SetThreadAffinityMask SetFileShortNameA ReadConsoleInputW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DebugBreak ResetWriteWatch ReadConsoleOutputCharacterW DeleteFileA MoveFileExA GetConsoleAliasExesA SetFilePointer CreateJobObjectA GetSystemDefaultLangID GetLastError HeapFree WideCharToMultiByte HeapAlloc GetCommandLineW HeapSetInformation DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess HeapCreate GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP Sleep LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent RtlUnwind SetStdHandle WriteConsoleW HeapReAlloc HeapSize FlushFileBuffers ReadFile CreateFileW CloseHandle RaiseException

gdi32

GetTextFaceA GetCharABCWidthsA SelectPalette GetCharWidthW

Sharing