file[.]exe | Triage™

General

Target
file.exe
Size 411KB
Sample230926-rln19abd33
SHA256 ea2ef9cccdc8edb4ab821991527ed4b4a7e047d752dd63f902598d03a486b85d
MD5 230264532693d60019bea5f6d9c825d1
SHA1 f46326ffb6042c9bfb422cce8d6d4348eb43693a
SHA512 e21f545d07e77a833872f7395e368276ceb8b1cdd2d0a6adb065af57969f31f5ad5f4ac545dcac049ce9817d380daa36ae849d2c9c06f7ef52661966cd68d92f
SSDEEP 6144:dOLc1vkeamA7uqck0h6OjAOKbgAed9z4GBc/+aUOn9WrDKng3d:dOA1ceamvBM3ed99y/nn9WrD73d
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 411KB

file.exe

IMPHASH e6417806f636d3a26a1e8916d3e05d01
SHA256 ea2ef9cccdc8edb4ab821991527ed4b4a7e047d752dd63f902598d03a486b85d
MD5 230264532693d60019bea5f6d9c825d1
SHA1 f46326ffb6042c9bfb422cce8d6d4348eb43693a
SHA512 e21f545d07e77a833872f7395e368276ceb8b1cdd2d0a6adb065af57969f31f5ad5f4ac545dcac049ce9817d380daa36ae849d2c9c06f7ef52661966cd68d92f
SSDEEP 6144:dOLc1vkeamA7uqck0h6OjAOKbgAed9z4GBc/+aUOn9WrDKng3d:dOA1ceamvBM3ed99y/nn9WrD73d
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

3c:66:9d:92:48:a5:91:4b:b9:c5:bf:f7:33:d9:a8:85:15:06:a8:1d:68:d0:8e:68:0c:af:bc:bb:45:61:a8:a5

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=K Desktop Environment e.V.,O=K Desktop Environment e.V.,POSTALCODE=10969,STREET=Prinzenstr 85 F,L=Berlin,ST=Berlin,C=DE

Chains

Apr 27, 2022

CN=K Desktop Environment e.V.,O=K Desktop Environment e.V.,POSTALCODE=10969,STREET=Prinzenstr 85 F,L=Berlin,ST=Berlin,C=DE

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Minor OS version

0

Major OS version

6

Entry point

45442

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

ShowWindow

advapi32

AreAnyAccessesGranted

kernel32

CreateFileW InitializeSListHead GetConsoleWindow MultiByteToWideChar GetStringTypeW WideCharToMultiByte CloseHandle GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId WriteConsoleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess HeapSize RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap

Sharing