file[.]exe | Triage™

General

Target
file.exe
Size 335KB
Sample231124-17cd1see72
SHA256 d031dba06e6f21c4a0deaee93b9fa0ed8849f0d401ff26ca239e9da547030d77
MD5 3f51277d40f700520600a53ea46956fb
SHA1 6d0cb3e549331022b93beac4d7baf6eeaba63b46
SHA512 496ea7b04407bbb2b13ebca281b2511484b07bd7eeea720be18685134f629e9e942811d10bd35042b307e932eac1965ecd3c29e9c277b5afdde38b5327e4a26c
SSDEEP 3072:2NcT4GeuhI4aR7eAvOPHsiQ26E7YPrchq45D54o+TrYdke0:f4GeFJaHT6EUPrcyhTGx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 335KB

file.exe

IMPHASH 5c80077e1547ffc6f55b1869a125ea4a
SHA256 d031dba06e6f21c4a0deaee93b9fa0ed8849f0d401ff26ca239e9da547030d77
MD5 3f51277d40f700520600a53ea46956fb
SHA1 6d0cb3e549331022b93beac4d7baf6eeaba63b46
SHA512 496ea7b04407bbb2b13ebca281b2511484b07bd7eeea720be18685134f629e9e942811d10bd35042b307e932eac1965ecd3c29e9c277b5afdde38b5327e4a26c
SSDEEP 3072:2NcT4GeuhI4aR7eAvOPHsiQ26E7YPrchq45D54o+TrYdke0:f4GeFJaHT6EUPrcyhTGx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsExW TlsGetValue SetLocalTime FindResourceW GlobalAddAtomA SetConsoleTextAttribute InitializeSListHead GetSystemWindowsDirectoryW CreateJobObjectW GetEnvironmentStringsW SetComputerNameW GetModuleHandleW CreateNamedPipeW GetNumberFormatA GetPrivateProfileStringW GetGeoInfoW LoadLibraryW ReadConsoleInputA GetConsoleWindow GetConsoleAliasExesLengthW GetNamedPipeInfo GetVolumePathNameA GetConsoleAliasesW GetLastError CreateFileA GetProcAddress VirtualAlloc SearchPathA OpenWaitableTimerA LoadLibraryA CreateFileMappingA LocalAlloc CreateFileMappingW RemoveDirectoryW GetSystemInfo GlobalFindAtomW FindFirstVolumeMountPointA SetCalendarInfoA EndUpdateResourceA ReadConsoleInputW GetWindowsDirectoryW GetCurrentProcessId AddConsoleAliasA ReadConsoleOutputCharacterW GetComputerNameA DebugActiveProcess SetLastError Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc HeapFree RaiseException EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapReAlloc GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle FlushFileBuffers HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

GetMessageExtraInfo DdeQueryStringW CharToOemBuffA

gdi32

CreateCompatibleBitmap GetCharWidth32A GetCharABCWidthsFloatW

Sharing