file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

5.3MB
MD5

c0012d585ee58916c789a2cc49fb532f
SHA1

7e77ecea738c414a683834395ff31609fe69ce0e
SHA256

94de920ba2c29bd8bfcb127049bb6655c4d774c412c6450198f312def9823b7f
SHA512

80a10be2e7be5a33be22c3649abf6ffa8c4d5cb558b2610e3342f2e50701ae1f7bb91e6ea3e6673bcdd745d7a3f67d68916ac4515a35e5795aa2a81dacef9fd2
SSDEEP

98304:Fn7YXAsrtE31CLoWW9bU5+wCokTuZvH3BHVxGIpfiC7ER3BRpkgHthwr:Fn7jetEjyv1LiCg3BRDthe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:6 windows x64 arch:x64

3e108abbf5b70ba74c91cc0339a005dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetLastError
GetConsoleCP
WriteConsoleW
VirtualProtect
CloseHandle
ReadConsoleW
GetLastError
Sleep

comctl32

ImageList_BeginDrag
FlatSB_SetScrollProp
ImageList_Copy
ImageList_GetIcon
ImageList_Add
ImageList_Merge
MenuHelp
UninitializeFlatSB
PropertySheet
LBItemFromPt
ShowHideMenuCtl
InitCommonControlsEx

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceExW
SHHandleUpdateImage

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ