file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 472KB
Sample230906-13xt6acc51
SHA256 47e36ed61d8fb370d6bfd5c1b9cce3d124f7d7aaf94e5dcf7a7b73637b59d179
MD5 1ee2faa57609afea4b38126eb8f77fcc
SHA1 10361af28616be3edbca37d3b511018858741429
SHA512 6e4e85042760ccb0b9e5ed0927c67cc40a1164394c0ae15e7854a6ac06c6327059ecbfedcef6168ee5ced83c2fcd4c3f1efd9b57dddf101db36bc5266521097f
SSDEEP 6144:Wq2q5D2ruq257NHVbwz2RPBTCXPVjdn4DkPqzEt4LaYEVzsZOQHLtAvVEn5q:rdDdqyRH+2RPY4HYt4O9VzuNtuQ5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 472KB

file.exe

IMPHASH d17013689e887b16bffa7c0e14d6a4e5
SHA256 47e36ed61d8fb370d6bfd5c1b9cce3d124f7d7aaf94e5dcf7a7b73637b59d179
MD5 1ee2faa57609afea4b38126eb8f77fcc
SHA1 10361af28616be3edbca37d3b511018858741429
SHA512 6e4e85042760ccb0b9e5ed0927c67cc40a1164394c0ae15e7854a6ac06c6327059ecbfedcef6168ee5ced83c2fcd4c3f1efd9b57dddf101db36bc5266521097f
SSDEEP 6144:Wq2q5D2ruq257NHVbwz2RPBTCXPVjdn4DkPqzEt4LaYEVzsZOQHLtAvVEn5q:rdDdqyRH+2RPY4HYt4O9VzuNtuQ5
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39210

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA InterlockedDecrement GetCurrentProcess GetEnvironmentStringsW SetHandleInformation SetVolumeMountPointW OpenSemaphoreA GetSystemDefaultLCID FreeEnvironmentStringsA GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent EnumTimeFormatsA EnumTimeFormatsW GetCommandLineA TzSpecificLocalTimeToSystemTime GetDriveTypeA GetEnvironmentStrings ActivateActCtx GlobalAlloc GetPrivateProfileIntA LoadLibraryW IsValidLocale GetCalendarInfoA SetVolumeMountPointA SetConsoleCP TerminateProcess GetStartupInfoW CreateJobObjectA InterlockedExchange FindFirstFileA SetLastError PeekConsoleInputW MoveFileExA MoveFileW RemoveDirectoryA EnumSystemCodePagesW GlobalGetAtomNameA GlobalFree GetNumaHighestNodeNumber OpenMutexA GetProcessId UnhandledExceptionFilter GetFileType BuildCommDCBAndTimeoutsW AddVectoredExceptionHandler AddAtomW GetProfileStringA FindNextFileA EnumDateFormatsA GlobalUnWire GetModuleHandleA SetLocaleInfoW FindNextFileW CreateMailslotA VirtualProtect GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA GetShortPathNameW OpenSemaphoreW FindFirstVolumeW ReadFile WriteConsoleW GetVolumeNameForVolumeMountPointA GetConsoleAliasExesA EnumResourceNamesW GetPrivateProfileSectionNamesW GetCommandLineW EnumDateFormatsExA FlushFileBuffers SetStdHandle GetConsoleMode WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc DeleteFileA HeapSetInformation GetCPInfo RaiseException RtlUnwind LCMapStringW GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetProcAddress SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW CloseHandle FreeEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA HeapReAlloc SetFilePointer GetConsoleCP CreateFileW

user32

GetMessagePos

gdi32

SelectPalette GetCharABCWidthsW GetTextFaceW

advapi32

LookupAccountSidW

shell32

DragFinish

ole32

CoGetInstanceFromFile