file[.]exe | Triage™

General

Target
file.exe
Size 329KB
Sample231118-qrs2qaee39
SHA256 16f87be3089eb452dc6be5fa821bca1009612d5ac7bc119964f7424c54ffec0b
MD5 ce0c0c816c0dcb5abf99e74aeba227f2
SHA1 af9f27a71c35c48958233118160d36e6126af83e
SHA512 0869694ac0e9e054d00bee9696f9a5ea98bf58953c8dad330e0e5c16d4da3284b30da95f9e4c78986c1a8240725931a0f2e0b29c86dc83e74a152b68d34e3eac
SSDEEP 6144:Irzhs6Y2O4Jf6kKXn5h9agJNy/7erWXa:AhsB2D56HXn5h9JNyTPX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 329KB

file.exe

IMPHASH daf5d79b20a588ea8ec63384b8dceff9
SHA256 16f87be3089eb452dc6be5fa821bca1009612d5ac7bc119964f7424c54ffec0b
MD5 ce0c0c816c0dcb5abf99e74aeba227f2
SHA1 af9f27a71c35c48958233118160d36e6126af83e
SHA512 0869694ac0e9e054d00bee9696f9a5ea98bf58953c8dad330e0e5c16d4da3284b30da95f9e4c78986c1a8240725931a0f2e0b29c86dc83e74a152b68d34e3eac
SSDEEP 6144:Irzhs6Y2O4Jf6kKXn5h9agJNy/7erWXa:AhsB2D56HXn5h9JNyTPX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21561

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsExW SetLocalTime GetConsoleAliasExesLengthA FindResourceW InitializeSListHead GetNumberFormatA GetPrivateProfileStringW GetWindowsDirectoryA GetPriorityClass LoadLibraryW IsValidLocale ReadConsoleInputA GetSystemWindowsDirectoryA GetConsoleAliasW TerminateProcess CreateFileW GetVolumePathNameA GetConsoleAliasesW GetLastError SetLastError lstrcmpiA GetProcAddress VirtualAlloc SearchPathW SetVolumeLabelW RemoveDirectoryA OpenWaitableTimerA LoadLibraryA LocalAlloc SetConsoleWindowInfo FoldStringA GlobalFindAtomW FindFirstVolumeMountPointA GetModuleHandleA FreeEnvironmentStringsW WriteConsoleOutputAttribute _lopen EndUpdateResourceA GetCurrentProcessId GlobalAddAtomW AddConsoleAliasA GetConsoleProcessList CreateFileA CreateNamedPipeA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCommandLineA GetStartupInfoA RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetCurrentProcess IsDebuggerPresent HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMessageExtraInfo CharToOemBuffA

gdi32

GetCharABCWidthsFloatW

Sharing