file[.]exe | Triage™

General

Target
file.exe
Size 1.1MB
Sample231012-zmkdfsdc86
SHA256 78021d077fab98faec6d33eeaba4db8065c0ed42bd318a54fcac145dbe0585dc
MD5 91fd86e63ce500f01b44ea6323eb7b1b
SHA1 3dd59df60af746c460eb94c892e6ea6748d7619a
SHA512 4f51d4ce988b08360da801c73a6cacf75669b560fc7123df5f0f7defba377b463155c97955c9a9aa3f2183e3a7144cd3925af172c5d9f9676e8342cf50959356
SSDEEP 12288:JrRhpJYRRt16tC2KlUT7rjZfte9mjaLFUewDfuAoUAF66K78WKrNhcUv4:JZJYRRt16tC2KyvHfaLBwHV6K4WQ6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 1.1MB

file.exe

IMPHASH 4c2ede2d1d1824f0fded580996722f5f
SHA256 78021d077fab98faec6d33eeaba4db8065c0ed42bd318a54fcac145dbe0585dc
MD5 91fd86e63ce500f01b44ea6323eb7b1b
SHA1 3dd59df60af746c460eb94c892e6ea6748d7619a
SHA512 4f51d4ce988b08360da801c73a6cacf75669b560fc7123df5f0f7defba377b463155c97955c9a9aa3f2183e3a7144cd3925af172c5d9f9676e8342cf50959356
SSDEEP 12288:JrRhpJYRRt16tC2KlUT7rjZfte9mjaLFUewDfuAoUAF66K78WKrNhcUv4:JZJYRRt16tC2KyvHfaLBwHV6K4WQ6
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter QueryPerformanceFrequency InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW LocalFree GetLocaleInfoEx EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx SetFileInformationByHandle GetTempPathW FlsAlloc FlsGetValue FlsSetValue FlsFree InitOnceExecuteOnce SleepConditionVariableCS CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetFileInformationByHandleEx CreateSymbolicLinkW GetStringTypeW CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW GetCurrentThread HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc SetConsoleCtrlHandler GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing