file[.]exe | Triage™

General

Target
file.exe
Size 359KB
Sample230916-nv55cada67
SHA256 18e816bd7e6faac64a412f33031e34d1e1c8be641d1db4f41cd7af382fce3431
MD5 58d42e7649f53567f1f6272b2467bb78
SHA1 dd08946bf0717fb8a2bad299d49ae8e9244d7b71
SHA512 68aec85b41dd15fb8b7128a9a36f779471f11a654cf665aa5bb2dc963dd0d0dc41462bc4b4ed8c14259d4925cd21e64bf6f7b6cb3ea27ebf9850c4da0142a386
SSDEEP 6144:6wcaGEZt20ZSwbz8+Dxe8kVAO5lS8V1y4pi/Vnok1oy/Q4Y0kparh8Ey:6wFzZtT78TH/VXcVnokOkQ4Ydarh8Ey
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH fc6316c96fc105fcdafe08845aa690ab
SHA256 18e816bd7e6faac64a412f33031e34d1e1c8be641d1db4f41cd7af382fce3431
MD5 58d42e7649f53567f1f6272b2467bb78
SHA1 dd08946bf0717fb8a2bad299d49ae8e9244d7b71
SHA512 68aec85b41dd15fb8b7128a9a36f779471f11a654cf665aa5bb2dc963dd0d0dc41462bc4b4ed8c14259d4925cd21e64bf6f7b6cb3ea27ebf9850c4da0142a386
SSDEEP 6144:6wcaGEZt20ZSwbz8+Dxe8kVAO5lS8V1y4pi/Vnok1oy/Q4Y0kparh8Ey:6wFzZtT78TH/VXcVnokOkQ4Ydarh8Ey
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39549

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep FreeConsole MultiByteToWideChar GetStringTypeW WideCharToMultiByte GetCurrentThreadId CloseHandle WaitForSingleObjectEx GetExitCodeThread EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap ReadConsoleW HeapSize WriteConsoleW

Sharing