file[.]exe | Triage™

General

Target
file.exe
Size 324KB
Sample230907-pt27qshf72
SHA256 160904f1153bcacca335d7469ae40d09fac4832ffe2c0cf464ec184132239591
MD5 7d316cee94acaa0bc67a21571bbc00f2
SHA1 0ca4ec09e32962d3d1c5338d12b7352d92d7c828
SHA512 0643b1df5af3cc4a0a6734ec8e353a153d109df4ac5efcc68c0fe00402e2aced4492897d512a4d2f276cf1da7086d3d90733d6d0987d3d956db4a08c592692a4
SSDEEP 6144:Y7XSz2OFiX9Qa4nIBM8zDBKgN0q5fDEp7OsYO:EzOFmqhIOmBKsTDc7Ot
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 324KB

file.exe

IMPHASH 6200f2b320af277fec49ce04b92f1379
SHA256 160904f1153bcacca335d7469ae40d09fac4832ffe2c0cf464ec184132239591
MD5 7d316cee94acaa0bc67a21571bbc00f2
SHA1 0ca4ec09e32962d3d1c5338d12b7352d92d7c828
SHA512 0643b1df5af3cc4a0a6734ec8e353a153d109df4ac5efcc68c0fe00402e2aced4492897d512a4d2f276cf1da7086d3d90733d6d0987d3d956db4a08c592692a4
SSDEEP 6144:Y7XSz2OFiX9Qa4nIBM8zDBKgN0q5fDEp7OsYO:EzOFmqhIOmBKsTDc7Ot
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

41278

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW InterlockedDecrement GetCurrentProcess GetEnvironmentStringsW SetHandleInformation GetProfileStringW AddConsoleAliasW SetVolumeMountPointW GetSystemDefaultLCID BackupSeek FreeEnvironmentStringsA GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent GetConsoleAliasesLengthA EnumTimeFormatsW GetCommandLineA TzSpecificLocalTimeToSystemTime GetDriveTypeA GetEnvironmentStrings ActivateActCtx GlobalAlloc LoadLibraryW GetCalendarInfoW SetVolumeMountPointA SetConsoleCP TerminateProcess GetSystemDirectoryA GetStartupInfoW RaiseException CreateJobObjectA GetPrivateProfileIntW MoveFileExA FindFirstFileA GetLastError PeekConsoleInputW EnumDateFormatsExA RemoveDirectoryA EnumSystemCodePagesW GlobalGetAtomNameA GetNumaHighestNodeNumber OpenMutexA GetProcessId LocalAlloc GetFileType MoveFileA BuildCommDCBAndTimeoutsW AddVectoredExceptionHandler GetNumberFormatW AddAtomW FindNextFileA GlobalUnWire GetModuleHandleA EnumResourceNamesA FindNextFileW GetStringTypeW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA GetShortPathNameW OpenSemaphoreW FindAtomW FindFirstVolumeW GetConsoleAliasExesA SetDefaultCommConfigA GetCommandLineW GetComputerNameA InterlockedExchange GetVolumeNameForVolumeMountPointA ReadFile WriteConsoleW WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetProcAddress ExitProcess DeleteFileA HeapSetInformation GetCPInfo RtlUnwind LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize CloseHandle FreeEnvironmentStringsW SetHandleCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers CreateFileW

gdi32

GetCharABCWidthsW GetTextFaceW SelectPalette

advapi32

LookupAccountSidW

ole32

CoGetInstanceFromFile

Sharing