file[.]exe | Triage™

General

Target
file.exe
Size 247KB
Sample230915-d1w4hsbc64
SHA256 910cfedbc993be6b23d3e46a0f34ee1c2a6b264f701c278d5465ec97054789d1
MD5 e706fdf61f3ec5e2d514294bdfc292d1
SHA1 3f3b39d9b5978aa2ddd5b540eb083980c9bbd2f6
SHA512 f26d11d4e52f4f38640717d69f18572a28a3f97578b24275ea3f381bd4eec91124513af22e94591d0e2571f090a853ce7db5d39591a790de5c04fb2546c5d7dd
SSDEEP 6144:i4HjlAX9L4T12iO8zwL8wZvPth4KQTtI:iKpA9E2iHqhZr4KA+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 247KB

file.exe

IMPHASH f1c4e212e1aea67945892365c32c31f7
SHA256 910cfedbc993be6b23d3e46a0f34ee1c2a6b264f701c278d5465ec97054789d1
MD5 e706fdf61f3ec5e2d514294bdfc292d1
SHA1 3f3b39d9b5978aa2ddd5b540eb083980c9bbd2f6
SHA512 f26d11d4e52f4f38640717d69f18572a28a3f97578b24275ea3f381bd4eec91124513af22e94591d0e2571f090a853ce7db5d39591a790de5c04fb2546c5d7dd
SSDEEP 6144:i4HjlAX9L4T12iO8zwL8wZvPth4KQTtI:iKpA9E2iHqhZr4KA+
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

38130

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW CreateFileA SetThreadContext SetFilePointer PeekNamedPipe VirtualQuery LoadResource SetConsoleTextAttribute OpenJobObjectA GetLogicalDriveStringsW GlobalLock InterlockedCompareExchange WriteConsoleInputA FreeEnvironmentStringsA GetModuleHandleW GetTickCount FormatMessageA GetDateFormatA LoadLibraryW GetFileAttributesA FindNextVolumeW ReplaceFileW FileTimeToSystemTime GetGeoInfoA IsDBCSLeadByte GetShortPathNameA GetLastError GetTempFileNameW GetProcAddress VirtualAlloc BackupWrite CreateHardLinkW BeginUpdateResourceA FoldStringW GetThreadPriority GetModuleHandleA FindFirstChangeNotificationA FindNextFileW OpenSemaphoreW FindFirstVolumeA CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA GetLocaleInfoW LoadLibraryA FlushFileBuffers GetConsoleMode GetConsoleCP ReadConsoleOutputCharacterA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetACP GetOEMCP IsValidCodePage ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle

user32

GetMenuItemID GetKeyNameTextA GetMessageExtraInfo ChangeMenuA GetParent LoadMenuA GetClassInfoExW CopyIcon LoadBitmapW DdeQueryStringA CloseWindow CharToOemBuffW

gdi32

GetCharWidthI

Sharing