file[.]exe | Triage™

General

Target
file.exe
Size 207KB
Sample230920-rmtywsgg4w
SHA256 8407e4bb6ffb05e1631bc7c1cc2165bb3ceef41e20586b9ca16baa65896c04ab
MD5 c1a5f2c2fdfe92338f77c7b7d491d93e
SHA1 50f7c267a1dd3508d4e18c46d83d1e5dabe48310
SHA512 a3f3144990d1ca7c1cc6e72f2fc33f9e9346e359ef189140937c1235417795d1409005a247004df55934cc21fabcf091382d84b2b0f77c82b8464ce93dd191c1
SSDEEP 6144:dPhrK7e9dDoe8OnkQp1Y7IVFKfukMG4UTu:dPhm0dDohO1asjKfukqc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 207KB

file.exe

IMPHASH d91386b9c0657f46a0e0fccbb7bb540a
SHA256 8407e4bb6ffb05e1631bc7c1cc2165bb3ceef41e20586b9ca16baa65896c04ab
MD5 c1a5f2c2fdfe92338f77c7b7d491d93e
SHA1 50f7c267a1dd3508d4e18c46d83d1e5dabe48310
SHA512 a3f3144990d1ca7c1cc6e72f2fc33f9e9346e359ef189140937c1235417795d1409005a247004df55934cc21fabcf091382d84b2b0f77c82b8464ce93dd191c1
SSDEEP 6144:dPhrK7e9dDoe8OnkQp1Y7IVFKfukMG4UTu:dPhm0dDohO1asjKfukqc
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

22177

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext FindFirstChangeNotificationW WriteConsoleInputW SetFilePointer PeekNamedPipe SetConsoleTextAttribute OpenJobObjectA InterlockedCompareExchange OpenSemaphoreA CreateHardLinkA FreeEnvironmentStringsA GetTickCount GetGeoInfoW GetDateFormatA LoadLibraryW SizeofResource GetFileAttributesA FindNextVolumeW FileTimeToSystemTime CreateFileW SetThreadPriority GlobalUnlock GetLogicalDriveStringsA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc BackupWrite GetTempFileNameA CreateHardLinkW BeginUpdateResourceA FoldStringA GetModuleFileNameA FindNextFileA EnumResourceNamesA GetShortPathNameW FindFirstVolumeA GetConsoleProcessList HeapSize HeapFree GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc RtlUnwind SetHandleCount GetStdHandle GetFileType GetModuleHandleW Sleep ExitProcess WriteFile GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA GetConsoleCP GetConsoleMode LoadLibraryA RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile GetProcessHeap ReadFile WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetClassInfoExA GetMessageExtraInfo LoadMenuA CharToOemBuffA

Sharing