file[.]exe | Triage™

General

Target
file.exe
Size 266KB
Sample230908-pq7caabe7s
SHA256 802ba7207a318efc8155756a171efee5d6f9432d7297c985e3bf63e87dabd0fe
MD5 c8c314317aaffd359c59e7a76179e916
SHA1 ae4ad73932810c761e55d25613bd5fbb0637e7fd
SHA512 88d32628c825de5ac9d80525adc0f7312656cf44c2b2be63e65512821092d25a96ebab17b1a92ff6473d8632f3423d0c9b58fcfcf16eee272027be620ebb8de1
SSDEEP 6144:oDMB4HLMDC8w+w9y7JyxVYRccuELneSFB:oDt+C8wi7JynYRc9ETeSFB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 266KB

file.exe

IMPHASH 4868013697dba3fbfba2507dbe7e510e
SHA256 802ba7207a318efc8155756a171efee5d6f9432d7297c985e3bf63e87dabd0fe
MD5 c8c314317aaffd359c59e7a76179e916
SHA1 ae4ad73932810c761e55d25613bd5fbb0637e7fd
SHA512 88d32628c825de5ac9d80525adc0f7312656cf44c2b2be63e65512821092d25a96ebab17b1a92ff6473d8632f3423d0c9b58fcfcf16eee272027be620ebb8de1
SSDEEP 6144:oDMB4HLMDC8w+w9y7JyxVYRccuELneSFB:oDt+C8wi7JynYRc9ETeSFB
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26563

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW GetTempFileNameW EnumResourceNamesW CreateFileA FindFirstChangeNotificationW PeekNamedPipe SetEndOfFile GetConsoleAliasA InterlockedDecrement GetSystemWindowsDirectoryW AddConsoleAliasW CreateHardLinkA GetTickCount GetConsoleAliasesLengthA LoadLibraryW ReadConsoleInputA SizeofResource FreeConsole HeapDestroy GetFileAttributesW FileTimeToSystemTime RaiseException FindFirstFileA GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CreateFileMappingW FoldStringW GetModuleHandleA FreeEnvironmentStringsW GetShortPathNameW SetCalendarInfoA EndUpdateResourceA FindFirstVolumeW EnumResourceLanguagesW AreFileApisANSI ReadFile GetProcessHeap FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA LCMapStringW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind HeapFree HeapAlloc WideCharToMultiByte SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount CloseHandle SetStdHandle LoadLibraryA LCMapStringA

user32

ChangeMenuW CharUpperBuffW GetClassInfoExA GetMessageExtraInfo CopyIcon LoadMenuW FlashWindow DdeQueryStringA GetKeyNameTextW CharToOemBuffW

Sharing