file[.]exe | Triage™

General

Target
file.exe
Size 392KB
Sample230915-wkp95sha47
SHA256 52b4d5ccbf54f79bc94b9779d549e5710a231bcef1cc76b611c21f4e9ad756d0
MD5 4a4dff274a0ee937fc6d6497e1c8bc78
SHA1 9fa58ad6dd5be361ccb4c20552e96e44f3482e43
SHA512 096d408ce8009068c1bf68352ea74eb3faca285a6b042e0482054b462d0ca92f223ed5089b68068270dcc3df9912ea84f369cfd330e56f7963e52cc181ae660c
SSDEEP 6144:1escF7qOXciQ3xFF1kCaX4z4AOGKgfGPmScL3jfyLN5mFKg8fi:ssc1tXcve448Kg7jfH8fi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 392KB

file.exe

IMPHASH c8144f386a1d9b87b36aea6b6202dfaf
SHA256 52b4d5ccbf54f79bc94b9779d549e5710a231bcef1cc76b611c21f4e9ad756d0
MD5 4a4dff274a0ee937fc6d6497e1c8bc78
SHA1 9fa58ad6dd5be361ccb4c20552e96e44f3482e43
SHA512 096d408ce8009068c1bf68352ea74eb3faca285a6b042e0482054b462d0ca92f223ed5089b68068270dcc3df9912ea84f369cfd330e56f7963e52cc181ae660c
SSDEEP 6144:1escF7qOXciQ3xFF1kCaX4z4AOGKgfGPmScL3jfyLN5mFKg8fi:ssc1tXcve448Kg7jfH8fi
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39332

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeConsole MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetStringTypeW WideCharToMultiByte GetCurrentThreadId CloseHandle WaitForSingleObjectEx Sleep GetExitCodeThread InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap ReadConsoleW HeapSize WriteConsoleW

Sharing