file[.]exe | Triage™

General

Target
file.exe
Size 210KB
Sample230910-yhhtdsbc97
SHA256 6a14002ccd42f720001b28a0efff201c6d35dbed90d71b6a546c337df6ae0d5f
MD5 f553ab409bd3bb412c80bb7dc97d967c
SHA1 0af33064e260f9aa3932f143f934b309f93fa6c4
SHA512 07863bcc1a12eec7f4f209c4749779d26f98de2e9071d11840c8ec0bf3ffa28d4c8d183b4103c89ef640e607f686284035998f3ec4d0a605d99b8362856f21db
SSDEEP 3072:+uyHLuNfop5c7QRoEPf/Mo/uBB/7mjdlXjc2f7fh11594qPM0Hx:JSLuNop5lo0f/hf97fzJ4qE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 210KB

file.exe

IMPHASH 4cf103460b980a8c131a7789354b386b
SHA256 6a14002ccd42f720001b28a0efff201c6d35dbed90d71b6a546c337df6ae0d5f
MD5 f553ab409bd3bb412c80bb7dc97d967c
SHA1 0af33064e260f9aa3932f143f934b309f93fa6c4
SHA512 07863bcc1a12eec7f4f209c4749779d26f98de2e9071d11840c8ec0bf3ffa28d4c8d183b4103c89ef640e607f686284035998f3ec4d0a605d99b8362856f21db
SSDEEP 3072:+uyHLuNfop5c7QRoEPf/Mo/uBB/7mjdlXjc2f7fh11594qPM0Hx:JSLuNop5lo0f/hf97fzJ4qE
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16896

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA FindFirstChangeNotificationW GetConsoleAliasesLengthW PeekNamedPipe SetEndOfFile CancelWaitableTimer CreateHardLinkA FreeEnvironmentStringsA GetTickCount GetDateFormatA ReadConsoleInputA SizeofResource GetFileAttributesW FileTimeToSystemTime GlobalUnlock GetShortPathNameA FindFirstFileA GetLogicalDriveStringsA GetLastError SetLastError GetTempFileNameW AttachConsole VirtualAlloc BeginUpdateResourceW LoadLibraryA SetConsoleCtrlHandler SetFileApisToANSI OpenJobObjectW FoldStringA GetModuleHandleA SetCalendarInfoA FindFirstVolumeW ReadConsoleOutputCharacterW GetLocaleInfoA GetProcAddress HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement RaiseException Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

LoadMenuA DdeQueryStringW GetClassInfoExW GetKeyNameTextW CharToOemBuffW GetMessageExtraInfo

gdi32

CreateDCA

Sharing