file[.]exe | Triage™

General

Target
file.exe
Size 274KB
Sample230906-eshftsdb31
SHA256 574b077dd3e9f8ec41d2cd919445b06d765af63da6c5fa55c02843c4a486f638
MD5 f6f84d9ee95b7a6dd21838d21af0abb1
SHA1 82e97c60c1c7016952cfb81582ee794f1b287b10
SHA512 1fcf3551d3f7c84de8f8a9fd687c8eab16ab7f7559506a7d827fd01929f544c23308ac5c1f3d0d21474a4c6edb42e616d61f619eed533dc0bc803704425d199c
SSDEEP 3072:Ye0+emZjUhLyXugUYd4DypDvH/1zl58Bsn+vDUh51KCa0kT0l:700UhLyX7Vyydvf1la2n+vDWKCaIl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 274KB

file.exe

IMPHASH b4063692f94e7d5a4ef3c227197b9a51
SHA256 574b077dd3e9f8ec41d2cd919445b06d765af63da6c5fa55c02843c4a486f638
MD5 f6f84d9ee95b7a6dd21838d21af0abb1
SHA1 82e97c60c1c7016952cfb81582ee794f1b287b10
SHA512 1fcf3551d3f7c84de8f8a9fd687c8eab16ab7f7559506a7d827fd01929f544c23308ac5c1f3d0d21474a4c6edb42e616d61f619eed533dc0bc803704425d199c
SSDEEP 3072:Ye0+emZjUhLyXugUYd4DypDvH/1zl58Bsn+vDUh51KCa0kT0l:700UhLyX7Vyydvf1la2n+vDWKCaIl
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27021

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW GetTempFileNameW EnumResourceNamesW CreateFileA FindFirstFileW PeekNamedPipe SetEndOfFile GetSystemWindowsDirectoryW AddConsoleAliasW CreateHardLinkA GetTickCount GetConsoleAliasesLengthA FreeConsole HeapDestroy GetConsoleAliasW GetFileAttributesW FileTimeToSystemTime RaiseException GetShortPathNameA GetLastError GetProcAddress VirtualAlloc LoadLibraryA InterlockedExchangeAdd CreateFileMappingA SetCalendarInfoW FoldStringW GetModuleHandleA FindFirstChangeNotificationA FreeEnvironmentStringsW FindFirstVolumeA EndUpdateResourceA ReadConsoleInputW EnumResourceLanguagesW ReadConsoleOutputCharacterW AreFileApisANSI CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW WideCharToMultiByte SetStdHandle GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount FlushFileBuffers LCMapStringA LCMapStringW

user32

GetMessageExtraInfo ChangeMenuA GetIconInfo LoadMenuW CharToOemBuffW CharUpperBuffW

Sharing