file[.]exe | Triage™

General

Target
file.exe
Size 381KB
Sample230928-e2hsyshc92
SHA256 4f3ab894e7b94d0026ec632c24ebe877c8cb33c34dd77fbf0f967de5f3861e2b
MD5 e95dee5fcd5037f1008ddd5d310a8b58
SHA1 c372b99011b22f41386cff26087d6848191d545d
SHA512 41b64a5bdeef61e70177d76ca039da3a86d51902e67d798148974d51ebab0445e8776ba8f4a383b7c891c6d5a76fd61e9118b45f5c07f1df06b63967a25ae11b
SSDEEP 6144:ORCulXui16lr+3jHBwDp6mAOfHPJNkivgHhlUpNn3WUzjwwc33viKC:ORnui16lrgmVHRwImyjjcPiKC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 381KB

file.exe

IMPHASH 73011e4ba8dc0b0dfec2e41202c785bd
SHA256 4f3ab894e7b94d0026ec632c24ebe877c8cb33c34dd77fbf0f967de5f3861e2b
MD5 e95dee5fcd5037f1008ddd5d310a8b58
SHA1 c372b99011b22f41386cff26087d6848191d545d
SHA512 41b64a5bdeef61e70177d76ca039da3a86d51902e67d798148974d51ebab0445e8776ba8f4a383b7c891c6d5a76fd61e9118b45f5c07f1df06b63967a25ae11b
SSDEEP 6144:ORCulXui16lr+3jHBwDp6mAOfHPJNkivgHhlUpNn3WUzjwwc33viKC:ORnui16lrgmVHRwImyjjcPiKC
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

31782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ExtractIconExA ord137

user32

CallMsgFilterA

advapi32

AreAnyAccessesGranted

kernel32

GetProcessHeap SetStdHandle HeapSize CreateFileW UnhandledExceptionFilter FreeConsole CloseHandle GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW GetCPInfo IsProcessorFeaturePresent WriteConsoleW SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW SetEnvironmentVariableW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW

Sharing