file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 251KB
Sample231015-nvkhmsfb7y
SHA256 406d3c343fac7b3b70790be2ee88c7aef0a43c0aa71ee9e501847bb58df9caa3
MD5 b4bd03f5c8ea7b2f206b516c5277c91d
SHA1 47c80ecdd9d6a59eda1af1c496ae32282406c540
SHA512 7e1bd48ad51dd66d91e7a3cce2a28c76aabccce7c5a4d17b7555331f6f2d3944b74114af7efd24b637809bfbedf07d92c86e1c543bb0bd66d6b542d3dc523f61
SSDEEP 3072:P+ovvaodNN1cjDoF6qwY6HplbcHhQg3YegRkS3GcMbJ5zVfok:pXaoHN1cjDMSJl+QLegCS3VQb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 251KB

file.exe

IMPHASH f8d7b6f4b1be45f1a7c2df1ba9bbc18d
SHA256 406d3c343fac7b3b70790be2ee88c7aef0a43c0aa71ee9e501847bb58df9caa3
MD5 b4bd03f5c8ea7b2f206b516c5277c91d
SHA1 47c80ecdd9d6a59eda1af1c496ae32282406c540
SHA512 7e1bd48ad51dd66d91e7a3cce2a28c76aabccce7c5a4d17b7555331f6f2d3944b74114af7efd24b637809bfbedf07d92c86e1c543bb0bd66d6b542d3dc523f61
SSDEEP 3072:P+ovvaodNN1cjDoF6qwY6HplbcHhQg3YegRkS3GcMbJ5zVfok:pXaoHN1cjDMSJl+QLegCS3VQb
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17523

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PeekNamedPipe GetProcessIoCounters GetCurrentProcess SetComputerNameW SetVolumeMountPointW FreeEnvironmentStringsA GetProcessPriorityBoost GetModuleHandleW GetTickCount GetWindowsDirectoryA GetCompressedFileSizeW GetVolumePathNameW SizeofResource GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetNamedPipeInfo GetFileAttributesW MultiByteToWideChar ReleaseActCtx FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc PeekConsoleInputW GetConsoleAliasesLengthW BackupWrite EnumSystemCodePagesW GlobalFree LoadLibraryA LocalAlloc WritePrivateProfileStringA GetNumberFormatW AddAtomW RemoveDirectoryW FoldStringA GetOEMCP FindNextFileA FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect _lopen GlobalAddAtomW AddConsoleAliasA WriteConsoleW GetConsoleOutputCP WriteConsoleA WriteConsoleOutputCharacterW WriteConsoleInputW BeginUpdateResourceW SetDefaultCommConfigA GetProcessHeap SetEndOfFile FlushFileBuffers HeapFree GetCommandLineA GetStartupInfoA HeapAlloc RaiseException HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ReadFile WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP IsValidCodePage CloseHandle CreateFileA SetFilePointer SetStdHandle LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode

user32

LoadMenuA DdeSetQualityOfService CharToOemBuffA ChangeDisplaySettingsW

gdi32

GetCharABCWidthsFloatA CreateDIBPatternBrush

advapi32

RegOpenKeyW

shell32

ExtractAssociatedIconA

ole32

OleConvertIStorageToOLESTREAM