file[.]exe | Triage™

General

Target
file.exe
Size 233KB
Sample231129-1tw69sdc88
SHA256 7bee0b7e7a3c0a66e7bbbdf689bcd6d58f9f6fa4599a8f9f24d52d6946824a92
MD5 75974b5828a4de85fdf197130fcc3952
SHA1 e2f10d5a054f593f02c85ced1834f4bd90ffd8fb
SHA512 2b4e0d7793611bd3100234376af96349aebccfa3bce2ef89820756a5affb4673ae14f93924a7b48f078d2c73d380fd39fd859105bf91a306a05e443cc30d9f5f
SSDEEP 3072:xQ6Q2L+E61T6FkAd94zxWh/UCwJtTIB24sgNe4PCnDgV9hYQCqqe+C:C6sEry494zxSTpsgNJPSyJnC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 233KB

file.exe

IMPHASH 10d5222eea59eee664433b569e6134b8
SHA256 7bee0b7e7a3c0a66e7bbbdf689bcd6d58f9f6fa4599a8f9f24d52d6946824a92
MD5 75974b5828a4de85fdf197130fcc3952
SHA1 e2f10d5a054f593f02c85ced1834f4bd90ffd8fb
SHA512 2b4e0d7793611bd3100234376af96349aebccfa3bce2ef89820756a5affb4673ae14f93924a7b48f078d2c73d380fd39fd859105bf91a306a05e443cc30d9f5f
SSDEEP 3072:xQ6Q2L+E61T6FkAd94zxWh/UCwJtTIB24sgNe4PCnDgV9hYQCqqe+C:C6sEry494zxSTpsgNJPSyJnC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

34766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW CreateFileA WriteConsoleInputW WritePrivateProfileStructA BuildCommDCBAndTimeoutsA ReadConsoleA InterlockedDecrement ZombifyActCtx SetDefaultCommConfigW CreateJobObjectW GetProfileSectionA GetComputerNameW FindNextVolumeMountPointA CreateActCtxW GlobalAlloc TerminateThread ReadConsoleInputA DeleteVolumeMountPointW InterlockedPopEntrySList GlobalFlags WriteConsoleW GetTimeZoneInformation GetNamedPipeHandleStateW GetLargestConsoleWindowSize GetConsoleOutputCP FindFirstFileA GetLastError GetProcAddress PeekConsoleInputW VerLanguageNameA GetPrivateProfileStringA SetFileApisToOEM OpenWaitableTimerA LoadLibraryA GetConsoleScreenBufferInfo IsWow64Process GetNumberFormatW FoldStringA GlobalFindAtomW GetModuleHandleA GetProcessShutdownParameters OpenFileMappingW GetCPInfoExA LocalSize GetWindowsDirectoryW MoveFileWithProgressW CloseHandle SetStdHandle FlushFileBuffers WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent HeapCreate HeapSize GetModuleHandleW ExitProcess SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LoadLibraryW SetFilePointer GetConsoleCP GetConsoleMode CreateFileW

user32

CharUpperW CharToOemBuffA

Sharing