file[.]exe | Triage™

General

Target
file.exe
Size 415KB
Sample231114-kr54dsaa6s
SHA256 3e5d50f9256e94ff3a0e33bd30c01998a5cf299daf96808747729fb72650eab1
MD5 0cf947c3d5ed2e3ac3bb3c091d2f6240
SHA1 4866b28bee9d7cc5de63a9461329a313645e53b0
SHA512 cff9ab0fde293a5e8aff1fa63284e64fe7d5d23b4bcee3edf27bc3064a857b2b51a9e6ced125aa1893d3ff8e23e9a0c2c6e2bb4546bb6c9a8ad977b1167dd4d8
SSDEEP 6144:8pIU/FKe4lNUq/Vr58AOD0HfL+YGhNIwXrTCMNHHiXlgdRTa8Ob5lP0:JU9KeIB58yj+YaNhr0KHwb5l8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 415KB

file.exe

IMPHASH 1c7d0efed001e965dd9c0307904ea44a
SHA256 3e5d50f9256e94ff3a0e33bd30c01998a5cf299daf96808747729fb72650eab1
MD5 0cf947c3d5ed2e3ac3bb3c091d2f6240
SHA1 4866b28bee9d7cc5de63a9461329a313645e53b0
SHA512 cff9ab0fde293a5e8aff1fa63284e64fe7d5d23b4bcee3edf27bc3064a857b2b51a9e6ced125aa1893d3ff8e23e9a0c2c6e2bb4546bb6c9a8ad977b1167dd4d8
SSDEEP 6144:8pIU/FKe4lNUq/Vr58AOD0HfL+YGhNIwXrTCMNHHiXlgdRTa8Ob5lP0:JU9KeIB58yj+YaNhr0KHwb5l8
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

30515

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

GetDCBrushColor

user32

EnableWindow ValidateRgn

advapi32

RegSetKeySecurity

kernel32

HeapSize ReadConsoleW CreateFileW CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess GetExitCodeThread GetStringTypeW WideCharToMultiByte MultiByteToWideChar EncodePointer DecodePointer InitializeCriticalSectionEx LCMapStringEx GetCPInfo RaiseException RtlUnwind GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap GetFileType SetStdHandle GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc WriteConsoleW

Sharing