file[.]exe | Triage™

General

Target
file.exe
Size 209KB
Sample231004-js9mjaca35
SHA256 0d5083d6262b8f5e492b6be274d978415a00457069ae6cf044fc694fa6698515
MD5 331df2f0270d6c4029f2c4508d9196e7
SHA1 4c50044123244d80ed7880a4a5928ffedeeeeb8c
SHA512 fa492bacfcc705f77bbcc4dc5a0d2246c6bd70f942d7fd333bbecb34554fb2fccef0a800aca0ec8be6abde5d8553f2935848ea697b06a327f1f4c5ed93c7a073
SSDEEP 3072:M9dgupNh3yxWyilDA2JaOEmidMymboWtV29GBVa5UtS5nct8Ih:epNVOFilDdxehmboc2kHa5Dc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 209KB

file.exe

IMPHASH ce62d6c99a2ee08049f067650fad119c
SHA256 0d5083d6262b8f5e492b6be274d978415a00457069ae6cf044fc694fa6698515
MD5 331df2f0270d6c4029f2c4508d9196e7
SHA1 4c50044123244d80ed7880a4a5928ffedeeeeb8c
SHA512 fa492bacfcc705f77bbcc4dc5a0d2246c6bd70f942d7fd333bbecb34554fb2fccef0a800aca0ec8be6abde5d8553f2935848ea697b06a327f1f4c5ed93c7a073
SSDEEP 3072:M9dgupNh3yxWyilDA2JaOEmidMymboWtV29GBVa5UtS5nct8Ih:epNVOFilDdxehmboc2kHa5Dc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetDateFormatW FillConsoleOutputCharacterA SetVolumeLabelA RemoveVectoredExceptionHandler EndUpdateResourceW OpenJobObjectA ReadConsoleA InterlockedCompareExchange SetComputerNameW AddConsoleAliasW SetVolumeMountPointW GetProcessPriorityBoost GetTickCount GetNumberFormatA GetWindowsDirectoryA CreateActCtxW GlobalFindAtomA LoadLibraryW TerminateThread ReadConsoleInputA SizeofResource GetFileAttributesA TransactNamedPipe FindNextVolumeW CreateSemaphoreA WritePrivateProfileSectionW FileTimeToSystemTime GetCompressedFileSizeA GetACP SetLastError GetProcAddress VirtualAlloc PeekConsoleInputW BeginUpdateResourceW EnumSystemCodePagesW OpenWaitableTimerA LoadLibraryA InterlockedExchangeAdd LocalAlloc GetFileType CreateHardLinkW AddAtomW RemoveDirectoryW GetCommMask FoldStringW FindNextFileA OpenFileMappingW FreeEnvironmentStringsW EnumResourceNamesA VirtualProtect MoveFileWithProgressW AddConsoleAliasA ReadConsoleOutputCharacterW LocalFree GetVolumeInformationW GetProcessHeap SetEndOfFile GetLocaleInfoA MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree RaiseException WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess RtlUnwind ReadFile GetCPInfo GetOEMCP IsValidCodePage SetHandleCount GetStdHandle SetFilePointer GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetModuleHandleA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

GetWindowTextLengthW CharUpperBuffW LoadMenuA LoadMenuW SetMenu LoadBitmapW CharToOemBuffW ChangeDisplaySettingsA GetMessagePos

Sharing