file[.]exe | Triage™

General

Target
file.exe
Size 422KB
Sample230920-te3beahc3s
SHA256 8a7659a4b6739474463309063dc7d3e0b31f738efaed1f07da450fb0eeff4b57
MD5 f9e664749b9883c2c11a13605e9e9656
SHA1 534cf60d87fe26459a70a7f9939c44593a2222fe
SHA512 1e2ce7331eeb1270196b602f316ce3c79dfa4a4593d5d8760bfe3308fba12c510b1ad1e5d4688798e7b0429cb7439e718ae8629876e36081be8d452e6b872055
SSDEEP 12288:0ftsVA21H4Ex6fU8isWQb+QWltXWrXGtVErGiZ6:0ftXWYExivjWPXWAErGiZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 422KB

file.exe

IMPHASH e1f9f27a83d13d8b0a5e72b935d02f29
SHA256 8a7659a4b6739474463309063dc7d3e0b31f738efaed1f07da450fb0eeff4b57
MD5 f9e664749b9883c2c11a13605e9e9656
SHA1 534cf60d87fe26459a70a7f9939c44593a2222fe
SHA512 1e2ce7331eeb1270196b602f316ce3c79dfa4a4593d5d8760bfe3308fba12c510b1ad1e5d4688798e7b0429cb7439e718ae8629876e36081be8d452e6b872055
SSDEEP 12288:0ftsVA21H4Ex6fU8isWQb+QWltXWrXGtVErGiZ6:0ftXWYExivjWPXWAErGiZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

22241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext FindFirstChangeNotificationW SetFilePointer PeekNamedPipe SetConsoleTextAttribute OpenJobObjectA InterlockedCompareExchange WriteConsoleInputA CreateHardLinkA FreeEnvironmentStringsA GetTickCount GetDateFormatA LoadLibraryW SizeofResource GetFileAttributesA FindNextVolumeW FileTimeToSystemTime GetGeoInfoA CreateFileW SetThreadPriority GlobalUnlock GetLogicalDriveStringsA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc BackupWrite GetTempFileNameA CreateHardLinkW BeginUpdateResourceA FoldStringA GetModuleFileNameA FindNextFileA EnumResourceNamesA GetShortPathNameW OpenSemaphoreW FindFirstVolumeW GetConsoleProcessList HeapSize HeapFree GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc RtlUnwind SetHandleCount GetStdHandle GetFileType GetModuleHandleW Sleep ExitProcess WriteFile GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA GetConsoleCP GetConsoleMode LoadLibraryA RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile GetProcessHeap ReadFile WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetClassInfoExA GetMessageExtraInfo LoadMenuA CharToOemBuffA

Sharing