file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 386KB
Sample230901-krldzseb28
SHA256 f3fad225386f7222566703f13a3df005b36736afe33c6b324cd18f0df70f973f
MD5 e6f347743fcfbfd54fddcdd1d1835ca4
SHA1 91bfdee2209f460336a348590a5bad34adae1979
SHA512 5ff411f20be75924e9753a2ee68f38179d0d3b140dbf43a9331993c2b382df295989736e63b9520b4c294fee583a13fd34562ec6a2f12b62b2b396dd7bb001f2
SSDEEP 3072:pYUOO4GtogRSWo7nsojoIjm43NieoC+4Dw0ToGR5QEOn6KNKLPcOJdxH/WN:myt5RSx7sosIp9Hof0oGR5IvgLUebH/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 386KB

file.exe

IMPHASH a0157d3b2852cca44553b58241d89d57
SHA256 f3fad225386f7222566703f13a3df005b36736afe33c6b324cd18f0df70f973f
MD5 e6f347743fcfbfd54fddcdd1d1835ca4
SHA1 91bfdee2209f460336a348590a5bad34adae1979
SHA512 5ff411f20be75924e9753a2ee68f38179d0d3b140dbf43a9331993c2b382df295989736e63b9520b4c294fee583a13fd34562ec6a2f12b62b2b396dd7bb001f2
SSDEEP 3072:pYUOO4GtogRSWo7nsojoIjm43NieoC+4Dw0ToGR5QEOn6KNKLPcOJdxH/WN:myt5RSx7sosIp9Hof0oGR5IvgLUebH/
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33262

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameExA FindResourceW BuildCommDCBAndTimeoutsA InterlockedDecrement GetCurrentProcess InterlockedCompareExchange WriteConsoleInputA AddConsoleAliasW CreateHardLinkA FreeEnvironmentStringsA GetDateFormatA LoadLibraryW GetSystemWindowsDirectoryA GetFileAttributesW CreateFileW GetACP GetShortPathNameA FindFirstFileA GetLastError InterlockedFlushSList SetLastError PeekNamedPipe GetProcAddress VirtualAlloc VirtualAllocEx SetFileApisToOEM LoadLibraryA SetFileApisToANSI FindAtomA EnumResourceTypesW GetModuleHandleA FreeEnvironmentStringsW GetConsoleTitleW FileTimeToLocalFileTime FindFirstVolumeW CreateFileA CloseHandle WriteConsoleW GetConsoleAliasesLengthW FindFirstChangeNotificationW SetFilePointer UnregisterWait ReadConsoleOutputCharacterA EnumResourceNamesW GetConsoleOutputCP WriteConsoleA WideCharToMultiByte InterlockedIncrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW HeapAlloc HeapCreate VirtualFree HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW

user32

ChangeMenuW GetMessageExtraInfo LoadMenuW CharToOemBuffW

gdi32

GetCharacterPlacementA GetPolyFillMode

advapi32

ReadEventLogW ReportEventW

ole32

CoGetPSClsid