file[.]exe | Triage™

General

Target
file.exe
Size 348KB
Sample230914-j5k5psdb76
SHA256 5351d265d8fa6b98b59be5067dcf00456debdc87818b973edfe310afc6bdc46e
MD5 17f49cdb1e24e847aca429dcc4f2ed80
SHA1 18dc1275ff713cc2ca2ae26f1510be12389e8c9a
SHA512 29b2a0b434322c1ad654b18837258db13a056cb2ccbe8476cb9405602bd6f96c6637e25563ac459d7346e789ccda4a3ee30bce1be9c571055c8991007387cc84
SSDEEP 6144:StWLVglrwUfCB1refnrvpCDGFYooPovi+zTDIhZgX4EXBSTt4:GWalrSBkeNK7H8hGpxiC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 348KB

file.exe

IMPHASH ef163fd1a1dfd01940ab083fe4660afa
SHA256 5351d265d8fa6b98b59be5067dcf00456debdc87818b973edfe310afc6bdc46e
MD5 17f49cdb1e24e847aca429dcc4f2ed80
SHA1 18dc1275ff713cc2ca2ae26f1510be12389e8c9a
SHA512 29b2a0b434322c1ad654b18837258db13a056cb2ccbe8476cb9405602bd6f96c6637e25563ac459d7346e789ccda4a3ee30bce1be9c571055c8991007387cc84
SSDEEP 6144:StWLVglrwUfCB1refnrvpCDGFYooPovi+zTDIhZgX4EXBSTt4:GWalrSBkeNK7H8hGpxiC
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15846

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW SetThreadContext FindFirstChangeNotificationW PeekNamedPipe SetEndOfFile LoadResource SetConsoleTextAttribute GetLogicalDriveStringsW FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetDateFormatA LoadLibraryW IsValidLocale ReadConsoleInputA GetFileAttributesA FileTimeToSystemTime GlobalUnlock GetShortPathNameA GetLastError GetProcAddress VirtualAlloc CreateFileA BackupWrite GetTempFileNameA CreateHardLinkW OpenJobObjectW FoldStringA GetModuleHandleA FindFirstVolumeA ReadConsoleOutputCharacterW CloseHandle HeapSize WriteConsoleW GetConsoleOutputCP WriteConsoleA RaiseException LoadLibraryA BeginUpdateResourceW HeapFree MultiByteToWideChar GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers

user32

CharToOemBuffA GetKeyNameTextA GetClassInfoExA GetMessageExtraInfo ChangeMenuA LoadBitmapA GetParent LoadMenuA DdeQueryStringW CopyIcon FlashWindow

gdi32

GetCharWidthI

Sharing