file[.]exe | Triage™

General

Target
file.exe
Size 209KB
Sample231004-gb96mabc49
SHA256 108912996290f472cc2f1a1ed14e8ce0ea80b5472253265e330477fc4d5f044d
MD5 86bfd0f65ca753b5828294c8d8be2c63
SHA1 3e0dcb98ac75915a799df1e4e874279b6b4045fd
SHA512 eefac63f7e89e82ad9075b170f96cee08059572f86ac69f85b9fae4c3badcdd80412eb7d2994029de72211630e3df75d9285c92239aa13017df5e920d3c24fd3
SSDEEP 3072:t970nmehdqzAOsMQUu/uFYKwKijs0ndjzVDEXpw7Koc7Lf1S5aLt8AEh:mmePQjsMQN/u6KwKizdtaOKo0LnLj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 209KB

file.exe

IMPHASH ce62d6c99a2ee08049f067650fad119c
SHA256 108912996290f472cc2f1a1ed14e8ce0ea80b5472253265e330477fc4d5f044d
MD5 86bfd0f65ca753b5828294c8d8be2c63
SHA1 3e0dcb98ac75915a799df1e4e874279b6b4045fd
SHA512 eefac63f7e89e82ad9075b170f96cee08059572f86ac69f85b9fae4c3badcdd80412eb7d2994029de72211630e3df75d9285c92239aa13017df5e920d3c24fd3
SSDEEP 3072:t970nmehdqzAOsMQUu/uFYKwKijs0ndjzVDEXpw7Koc7Lf1S5aLt8AEh:mmePQjsMQN/u6KwKizdtaOKo0LnLj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetDateFormatW FillConsoleOutputCharacterA SetVolumeLabelA RemoveVectoredExceptionHandler EndUpdateResourceW OpenJobObjectA ReadConsoleA InterlockedCompareExchange SetComputerNameW AddConsoleAliasW SetVolumeMountPointW GetProcessPriorityBoost GetTickCount GetNumberFormatA GetWindowsDirectoryA CreateActCtxW GlobalFindAtomA LoadLibraryW TerminateThread ReadConsoleInputA SizeofResource GetFileAttributesA TransactNamedPipe FindNextVolumeW CreateSemaphoreA WritePrivateProfileSectionW FileTimeToSystemTime GetCompressedFileSizeA GetACP SetLastError GetProcAddress VirtualAlloc PeekConsoleInputW BeginUpdateResourceW EnumSystemCodePagesW OpenWaitableTimerA LoadLibraryA InterlockedExchangeAdd LocalAlloc GetFileType CreateHardLinkW AddAtomW RemoveDirectoryW GetCommMask FoldStringW FindNextFileA OpenFileMappingW FreeEnvironmentStringsW EnumResourceNamesA VirtualProtect MoveFileWithProgressW AddConsoleAliasA ReadConsoleOutputCharacterW LocalFree GetVolumeInformationW GetProcessHeap SetEndOfFile GetLocaleInfoA MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree RaiseException WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess RtlUnwind ReadFile GetCPInfo GetOEMCP IsValidCodePage SetHandleCount GetStdHandle SetFilePointer GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetModuleHandleA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

GetWindowTextLengthW CharUpperBuffW LoadMenuA LoadMenuW SetMenu LoadBitmapW CharToOemBuffW ChangeDisplaySettingsA GetMessagePos

Sharing