file[.]exe | Triage™

General

Target
file.exe
Size 218KB
Sample231004-tshh6ada2s
SHA256 cc58ad1f7a097f077f06b78e21c1f5a01007cd98613b602bb22b95751920ba80
MD5 6c7c496c1017c9435717f711bf5b8af3
SHA1 f19a0b3803266c080bf7fcfad9fefab75ad7ef32
SHA512 278e66e318b9e4cf279d364be5bd1279af5b3e0f978c18d95e90fa48aa9e1cd5085cf1174c05afd99e66ac38f6ac94482316c5e7548c5425a4577145425e7c78
SSDEEP 3072:ozwXzwdfAqq4ULQTamiuqh2WGxzJRfg1Usc6NlppHHBTJX5qNht87hP9:L8bqDLQTBFqa5JRfgFj3HQNh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 218KB

file.exe

IMPHASH 7bf0c3cbf0d3960e40b75bc830477f17
SHA256 cc58ad1f7a097f077f06b78e21c1f5a01007cd98613b602bb22b95751920ba80
MD5 6c7c496c1017c9435717f711bf5b8af3
SHA1 f19a0b3803266c080bf7fcfad9fefab75ad7ef32
SHA512 278e66e318b9e4cf279d364be5bd1279af5b3e0f978c18d95e90fa48aa9e1cd5085cf1174c05afd99e66ac38f6ac94482316c5e7548c5425a4577145425e7c78
SSDEEP 3072:ozwXzwdfAqq4ULQTamiuqh2WGxzJRfg1Usc6NlppHHBTJX5qNht87hP9:L8bqDLQTBFqa5JRfgFj3HQNh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

27484

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetDateFormatW FillConsoleOutputCharacterA EnumResourceNamesW SetVolumeLabelA RemoveVectoredExceptionHandler EndUpdateResourceW ReadConsoleA GetConsoleAliasA GetSystemWindowsDirectoryW InterlockedCompareExchange SetComputerNameW AddConsoleAliasW SetVolumeMountPointW MoveFileWithProgressA GetTickCount GetNumberFormatA CreateActCtxW SetProcessPriorityBoost GetVolumeInformationA GlobalFindAtomA TerminateThread ReadConsoleInputA SizeofResource GetFileAttributesA TransactNamedPipe FindNextVolumeW WritePrivateProfileSectionW FileTimeToSystemTime GetCompressedFileSizeA GetACP SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc PeekConsoleInputW RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA CreateSemaphoreW InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc GetFileType CreateHardLinkW AddAtomW BeginUpdateResourceA GetCommMask FoldStringW FindNextFileA FreeEnvironmentStringsW VirtualProtect TerminateJobObject GetWindowsDirectoryW OpenFileMappingA LocalFree GetProcessHeap SetEndOfFile GetLocaleInfoA MultiByteToWideChar GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree RaiseException WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind ReadFile GetCPInfo GetOEMCP IsValidCodePage SetHandleCount GetStdHandle SetFilePointer GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetModuleHandleA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CloseHandle CreateFileA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

GetWindowTextLengthW CharUpperBuffW LoadBitmapA LoadMenuA SetMenu CharToOemBuffW ChangeDisplaySettingsA GetMessagePos

Sharing