file[.]exe | Triage™

General

Target
file.exe
Size 337KB
Sample231016-hpsdeacc5x
SHA256 9dce80f85a97e75765dfac0a48e0c1cc59528ecb2bebb6e8a07e3e9e7bc5420f
MD5 f3b31dd709f3338f9fc807b8560232b1
SHA1 1283764272f9e3d197927a1b98e0e7ccd244310b
SHA512 beca526759ab720e88baa06cd3d665a866fb2d89732c3b6f0d2b601e838e51bd1e361e736c6897aa5611cb4aea355c63e39a5edbdd6c2e6c32a7b62757a351f1
SSDEEP 6144:bZEe3bpi5aaYcqYfgcm7RT0nARu+4IoHH3RcBunSrb6I8TJn:bZEe3zYfdWS+2H9ndI8TJn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 337KB

file.exe

IMPHASH 28c7c58d6ab216358623ab8e3b898f92
SHA256 9dce80f85a97e75765dfac0a48e0c1cc59528ecb2bebb6e8a07e3e9e7bc5420f
MD5 f3b31dd709f3338f9fc807b8560232b1
SHA1 1283764272f9e3d197927a1b98e0e7ccd244310b
SHA512 beca526759ab720e88baa06cd3d665a866fb2d89732c3b6f0d2b601e838e51bd1e361e736c6897aa5611cb4aea355c63e39a5edbdd6c2e6c32a7b62757a351f1
SSDEEP 6144:bZEe3bpi5aaYcqYfgcm7RT0nARu+4IoHH3RcBunSrb6I8TJn:bZEe3zYfdWS+2H9ndI8TJn
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

CloseEventLog

kernel32

FreeConsole CloseHandle GetCurrentThreadId QueryPerformanceCounter InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW RaiseException RtlUnwind GetLastError SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType GetFileSizeEx SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize HeapReAlloc CreateFileW DecodePointer

Sharing