file[.]exe | Triage™

General

Target
file.exe
Size 222KB
Sample231203-pb8a2abh8s
SHA256 a107761e07285211f678a660bd7dc514340bdd837d5ea762bb2409f237da1437
MD5 d479b3d99dabecc2296ed25097baa38f
SHA1 dc5c6e81e5cecebd965119db14ef39080fb62c80
SHA512 1e37ea8fd7fadeec61913fb2a8150e79b2847c057034c293a72d242a78133a0b7e4935d32228ed7d419d4efe340d650652c659e7680653e758f5dc8003c53b3c
SSDEEP 6144:9KwZvPnAfE05KBhMCGEYcAr1dS2Rcc0j:U3fE04BCCG5nry2Rcc0j
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 222KB

file.exe

IMPHASH 6437f5b1c65d8c1f9ba95c51c12f20f6
SHA256 a107761e07285211f678a660bd7dc514340bdd837d5ea762bb2409f237da1437
MD5 d479b3d99dabecc2296ed25097baa38f
SHA1 dc5c6e81e5cecebd965119db14ef39080fb62c80
SHA512 1e37ea8fd7fadeec61913fb2a8150e79b2847c057034c293a72d242a78133a0b7e4935d32228ed7d419d4efe340d650652c659e7680653e758f5dc8003c53b3c
SSDEEP 6144:9KwZvPnAfE05KBhMCGEYcAr1dS2Rcc0j:U3fE04BCCG5nry2Rcc0j
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

35242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SetDefaultCommConfigA FindFirstFileW SetLocaleInfoA WriteConsoleInputW HeapAlloc UpdateResourceA VerSetConditionMask InterlockedDecrement GetNamedPipeHandleStateA OutputDebugStringW GetNumberFormatA ReadConsoleW WriteFile GetCommandLineA GlobalAlloc TerminateThread GetLocaleInfoW ReadConsoleInputA SetConsoleCP GlobalFlags CreateFileW CreateActCtxA FindNextVolumeMountPointW GetStartupInfoW CreateJobObjectA GetCPInfoExW GetLastError GetProcAddress HeapSize IsValidCodePage VerLanguageNameW LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW GetConsoleScreenBufferInfo IsWow64Process BuildCommDCBAndTimeoutsW GetModuleHandleA SetProcessShutdownParameters LocalSize GetWindowsDirectoryW OpenFileMappingA GetProfileSectionW ExpandEnvironmentStringsW WriteConsoleW SetStdHandle FlushFileBuffers WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc GetCommandLineW HeapSetInformation GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent GetACP GetOEMCP TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType ExitProcess GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode LoadLibraryW CloseHandle

user32

CharToOemBuffW CharUpperW

Sharing