HB23090003[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
HB23090003.exe
Size 587KB
Sample230901-pp2emsfa28
SHA256 b2d5e15268cb130c995118e17afa1198ca19604a20b91f1907a7ef18210db30f
MD5 1becaa0726bae1f669da8d39ac13509b
SHA1 43df013242f0172059e8df21e29215b14c1837c9
SHA512 d24eb2b9fa443458f37510095597214ab83fcd1124344405e3d0eb180dd80a1c345e7d21fdf3fb04f5d3a2691a15c606c9e719e70977decf7579a32479897f29
SSDEEP 12288:kBkhRxDIusx/JyqVMdFYiUgam+XodmA+Ae+cgLUeL/:OkhbZsRJy8Md6iUNnX1RZgLHL/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HB23090003.exe

File Explorer

HB23090003.exe

.exe 587KB

HB23090003.exe

IMPHASH a0157d3b2852cca44553b58241d89d57
SHA256 b2d5e15268cb130c995118e17afa1198ca19604a20b91f1907a7ef18210db30f
MD5 1becaa0726bae1f669da8d39ac13509b
SHA1 43df013242f0172059e8df21e29215b14c1837c9
SHA512 d24eb2b9fa443458f37510095597214ab83fcd1124344405e3d0eb180dd80a1c345e7d21fdf3fb04f5d3a2691a15c606c9e719e70977decf7579a32479897f29
SSDEEP 12288:kBkhRxDIusx/JyqVMdFYiUgam+XodmA+Ae+cgLUeL/:OkhbZsRJy8Md6iUNnX1RZgLHL/
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33262

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameExA FindResourceW BuildCommDCBAndTimeoutsA InterlockedDecrement GetCurrentProcess InterlockedCompareExchange WriteConsoleInputA AddConsoleAliasW CreateHardLinkA FreeEnvironmentStringsA GetDateFormatA LoadLibraryW GetSystemWindowsDirectoryA GetFileAttributesW CreateFileW GetACP GetShortPathNameA FindFirstFileA GetLastError InterlockedFlushSList SetLastError PeekNamedPipe GetProcAddress VirtualAlloc VirtualAllocEx SetFileApisToOEM LoadLibraryA SetFileApisToANSI FindAtomA EnumResourceTypesW GetModuleHandleA FreeEnvironmentStringsW GetConsoleTitleW FileTimeToLocalFileTime FindFirstVolumeW CreateFileA CloseHandle WriteConsoleW GetConsoleAliasesLengthW FindFirstChangeNotificationW SetFilePointer UnregisterWait ReadConsoleOutputCharacterA EnumResourceNamesW GetConsoleOutputCP WriteConsoleA WideCharToMultiByte InterlockedIncrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW HeapAlloc HeapCreate VirtualFree HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW

user32

ChangeMenuW GetMessageExtraInfo LoadMenuW CharToOemBuffW

gdi32

GetCharacterPlacementA GetPolyFillMode

advapi32

ReadEventLogW ReportEventW

ole32

CoGetPSClsid