file[.]exe | Triage™

General

Target
file.exe
Size 392KB
Sample230916-d77tlabe43
SHA256 8a3604b987de66e8a95a64aa7d0f6512b6f8e84d33bba9d5ae712f35212a6cd7
MD5 4acf2eb9dc02bd0e62cabfb59ab3a006
SHA1 5b1e767f6eb163971afa83d4de5fb2c82c9a807e
SHA512 3d352429f4ba807ec4420eee51200c36b0b7f3c67603bf17a5910d4585a1b07b1a3aa0717d7b3aff29bffafe9022630157d1440079b86f9ee8c7f9332f96d88a
SSDEEP 6144:wercF7qOXciQ3xFF1kCaX4z4AOb2nBPx96/8G3QVju75iYkyUN+nHkdJTJscGGGP:drc1tXcve445CN+nHkd1JeZIyJ8fi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 392KB

file.exe

IMPHASH c8144f386a1d9b87b36aea6b6202dfaf
SHA256 8a3604b987de66e8a95a64aa7d0f6512b6f8e84d33bba9d5ae712f35212a6cd7
MD5 4acf2eb9dc02bd0e62cabfb59ab3a006
SHA1 5b1e767f6eb163971afa83d4de5fb2c82c9a807e
SHA512 3d352429f4ba807ec4420eee51200c36b0b7f3c67603bf17a5910d4585a1b07b1a3aa0717d7b3aff29bffafe9022630157d1440079b86f9ee8c7f9332f96d88a
SSDEEP 6144:wercF7qOXciQ3xFF1kCaX4z4AOb2nBPx96/8G3QVju75iYkyUN+nHkdJTJscGGGP:drc1tXcve445CN+nHkd1JeZIyJ8fi
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39332

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeConsole MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetStringTypeW WideCharToMultiByte GetCurrentThreadId CloseHandle WaitForSingleObjectEx Sleep GetExitCodeThread InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap ReadConsoleW HeapSize WriteConsoleW

Sharing