file[.]exe | Triage™

General

Target
file.exe
Size 369KB
Sample230901-akgr4sbc5v
SHA256 d054ccbf5652bac06dfb662b5a85ddd602bc0d59a2226253f2f5aa46dff9757f
MD5 7be8293e2066924a8db462781bc0aecc
SHA1 7679ef839afc27546ab5405735234565a1e5f6c6
SHA512 2ae31f4f3519d9ca1877960bc2aa8e8aa5244ffe9f6783df55658453cdd9991a6ec50a72d6ecb46b2776a4971c704ddf04467e7f9abdf606d42a9dbf2db06fdd
SSDEEP 6144:35rRDLsG6fvGgosSRRHu2suLkQax88t2VhVD/4NOjL8N6U25O:plfsG6mgosS/u2suI822rVQNOjLr7g
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 369KB

file.exe

IMPHASH 60202b26a1548f32d077efa3514a2fd4
SHA256 d054ccbf5652bac06dfb662b5a85ddd602bc0d59a2226253f2f5aa46dff9757f
MD5 7be8293e2066924a8db462781bc0aecc
SHA1 7679ef839afc27546ab5405735234565a1e5f6c6
SHA512 2ae31f4f3519d9ca1877960bc2aa8e8aa5244ffe9f6783df55658453cdd9991a6ec50a72d6ecb46b2776a4971c704ddf04467e7f9abdf606d42a9dbf2db06fdd
SSDEEP 6144:35rRDLsG6fvGgosSRRHu2suLkQax88t2VhVD/4NOjL8N6U25O:plfsG6mgosS/u2suI822rVQNOjLr7g
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12843

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CommConfigDialogA MoveFileExW InterlockedDecrement CreateJobObjectW HeapFree GetEnvironmentStringsW SetHandleInformation SetVolumeMountPointW OpenSemaphoreA GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasExesW EnumTimeFormatsA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA AllocateUserPhysicalPages GetEnvironmentStrings GlobalAlloc LoadLibraryW IsValidLocale GetCalendarInfoW GetExitCodeProcess GetConsoleAliasW GetStartupInfoW GetPrivateProfileIntW GetStartupInfoA GetCurrentDirectoryW SetLastError ReadConsoleOutputCharacterA EnumDateFormatsExA FindFirstFileW RemoveDirectoryA EnumSystemCodePagesW GlobalGetAtomNameA GetNumaHighestNodeNumber LoadLibraryA OpenMutexA UnhandledExceptionFilter InterlockedExchangeAdd GlobalGetAtomNameW AddAtomA GetPrivateProfileSectionNamesA FindNextFileA GlobalUnWire GetModuleHandleA SetLocaleInfoW EnumResourceNamesA FindNextFileW CreateMailslotA VirtualProtect GetCurrentDirectoryA FatalAppExitA PeekConsoleInputA GetShortPathNameW OpenSemaphoreW FindFirstVolumeA GetCurrentProcessId GetFileSize GetCommandLineW GetVolumeNameForVolumeMountPointA MoveFileW SetStdHandle GetLastError HeapAlloc DeleteFileA HeapSetInformation EncodePointer DecodePointer IsProcessorFeaturePresent HeapCreate GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess FreeEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime RaiseException Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile CloseHandle WriteConsoleW SetFilePointer CreateFileW

user32

GetMessagePos

gdi32

GetTextFaceA SelectPalette GetCharABCWidthsW

shell32

DuplicateIcon

Sharing