file[.]exe | Triage™

General

Target
file.exe
Size 269KB
Sample231004-mjst7scg74
SHA256 1837622fbafa47eb30d479df4f4c97e41e54c9f65c99859b9b4ef195fa9bcdbc
MD5 815afad57e34d18bf204fbbfdf08904a
SHA1 a0b4bcb95b5ebf5a7db18fea617570f42f9248b3
SHA512 8430eca5105d2ec2c0299aa18dbcbfceb9fdc55c166a806c71c1b5adaabd962e5d399a4e4c51dd8cbf962b3d14d08309d1620ba015939eccfa66554e3e422565
SSDEEP 6144:oR6Saj92X8pS12L5HCQ1gBn5lU1NWgusrwGY:+apF5X1gBn5ijrwGY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 269KB

file.exe

IMPHASH b4cc1a381bd5d8c2658e28c19776cd56
SHA256 1837622fbafa47eb30d479df4f4c97e41e54c9f65c99859b9b4ef195fa9bcdbc
MD5 815afad57e34d18bf204fbbfdf08904a
SHA1 a0b4bcb95b5ebf5a7db18fea617570f42f9248b3
SHA512 8430eca5105d2ec2c0299aa18dbcbfceb9fdc55c166a806c71c1b5adaabd962e5d399a4e4c51dd8cbf962b3d14d08309d1620ba015939eccfa66554e3e422565
SSDEEP 6144:oR6Saj92X8pS12L5HCQ1gBn5lU1NWgusrwGY:+apF5X1gBn5ijrwGY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetDateFormatW FillConsoleOutputCharacterA EnumResourceNamesW SetVolumeLabelA RemoveVectoredExceptionHandler EndUpdateResourceW OpenJobObjectA ReadConsoleA InterlockedCompareExchange SetComputerNameW AddConsoleAliasW SetVolumeMountPointW GetTickCount GetNumberFormatA CreateActCtxW SetProcessPriorityBoost GetVolumeInformationA GlobalFindAtomA LoadLibraryW TerminateThread ReadConsoleInputA SizeofResource GetFileAttributesA TransactNamedPipe FindNextVolumeW WritePrivateProfileSectionW FileTimeToSystemTime GetCompressedFileSizeA GetACP SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc PeekConsoleInputW BeginUpdateResourceW RemoveDirectoryA EnumSystemCodePagesW OpenWaitableTimerA CreateSemaphoreW InterlockedExchangeAdd LocalAlloc GetFileType CreateHardLinkW AddAtomW GetCommMask FoldStringW FindNextFileA FreeEnvironmentStringsW VirtualProtect GetWindowsDirectoryW MoveFileWithProgressW AddConsoleAliasA OpenFileMappingA LocalFree GetProcessHeap SetEndOfFile GetLocaleInfoA MultiByteToWideChar GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree RaiseException WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess RtlUnwind ReadFile GetCPInfo GetOEMCP IsValidCodePage SetHandleCount GetStdHandle SetFilePointer GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetModuleHandleA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

GetWindowTextLengthW CharUpperBuffW LoadBitmapA LoadMenuA SetMenu CharToOemBuffW ChangeDisplaySettingsA GetMessagePos

Sharing