file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 414KB
Sample230917-c755bseh8x
SHA256 4c424b278100f486bbb1051cd4215d25bed271de77feab7bb95e629e3e383c1c
MD5 069f46ef1499d1b2f56e8c04cb9d5946
SHA1 484723138cadadd78cf30f7a610b5900bfd48eb5
SHA512 89990980b48fe15fbceff0aff3b9d9728f86163e6b4060063dd282a21f4f8a3d0265b2bdfbd4648182bfac37df6a7253238653aa04e9cc6bc6d7f1d61c0ab9b5
SSDEEP 6144:aBsrCjD9el//SkkJM8VyqZoUiJLBm63BJudg4zgRse6O30TPhFg+VWTI5:ouCjRel/aA8XEnmymcRbNobYTI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 414KB

file.exe

IMPHASH 0e5c0e73b8bfe5fddd6a11f97096fb35
SHA256 4c424b278100f486bbb1051cd4215d25bed271de77feab7bb95e629e3e383c1c
MD5 069f46ef1499d1b2f56e8c04cb9d5946
SHA1 484723138cadadd78cf30f7a610b5900bfd48eb5
SHA512 89990980b48fe15fbceff0aff3b9d9728f86163e6b4060063dd282a21f4f8a3d0265b2bdfbd4648182bfac37df6a7253238653aa04e9cc6bc6d7f1d61c0ab9b5
SSDEEP 6144:aBsrCjD9el//SkkJM8VyqZoUiJLBm63BJudg4zgRse6O30TPhFg+VWTI5:ouCjRel/aA8XEnmymcRbNobYTI
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13513

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode MoveFileExA SystemTimeToTzSpecificLocalTime InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize AddConsoleAliasW SetVolumeMountPointW BackupSeek GetModuleHandleW GetConsoleAliasesLengthA GetNumberFormatA SetFileTime GetConsoleAliasExesW GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW TerminateThread FatalAppExitW ReadConsoleInputA CopyFileW SetConsoleCP EnumSystemCodePagesA GetVolumePathNameA FindFirstFileW CreateJobObjectA GetLastError GetCurrentDirectoryW SetLastError LoadLibraryA OpenMutexA GetProcessId LocalAlloc GetFileType IsSystemResumeAutomatic RemoveDirectoryW GetProfileStringA FindNextChangeNotification FindAtomA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW SetStdHandle WriteConsoleW CloseHandle EnumResourceNamesW GetComputerNameA GetStartupInfoW GetCommandLineW CreateFileW MoveFileA HeapFree HeapAlloc GetProcAddress ExitProcess DecodePointer EncodePointer HeapSetInformation HeapCreate WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId Sleep HeapSize SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapReAlloc IsProcessorFeaturePresent LCMapStringW MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer

user32

CharUpperW GetListBoxInfo

gdi32

SelectPalette GetTextFaceW GetCharWidthW

shell32

DragFinish

winhttp

WinHttpGetProxyForUrl