file[.]exe | Triage™

General

Target
file.exe
Size 249KB
Sample231203-z4fftsfe21
SHA256 8ebf00851051741263cdc8af30a2a4ed456a21c5d82eb2f34f761e296020042e
MD5 6016f7e25ea1258da21e2c497260fd3a
SHA1 e1c13e993cede0c73755e8538234f8b9b85270aa
SHA512 2e571b4fb38945bff1cfe2849d0c1b5e1d5846ae9cf958a5165d0dcf3b14a02dfd642b6ec3e439a607b802b07768e11ca7a34c2c3eff7e5bbb8818eaa637ee49
SSDEEP 3072:XH82FeVPoLkTTK0WMSlnEPR+tS3aJRUpdLOUPwXv3AyUc2n:X8YmndWjVEPR+tS3OwdC/vA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 249KB

file.exe

IMPHASH 08b71b97d25fa2f8c125e716ca4ded51
SHA256 8ebf00851051741263cdc8af30a2a4ed456a21c5d82eb2f34f761e296020042e
MD5 6016f7e25ea1258da21e2c497260fd3a
SHA1 e1c13e993cede0c73755e8538234f8b9b85270aa
SHA512 2e571b4fb38945bff1cfe2849d0c1b5e1d5846ae9cf958a5165d0dcf3b14a02dfd642b6ec3e439a607b802b07768e11ca7a34c2c3eff7e5bbb8818eaa637ee49
SSDEEP 3072:XH82FeVPoLkTTK0WMSlnEPR+tS3aJRUpdLOUPwXv3AyUc2n:X8YmndWjVEPR+tS3OwdC/vA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

42956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SetDefaultCommConfigA FindFirstFileW SetLocaleInfoA WriteConsoleInputW HeapAlloc UpdateResourceA VerSetConditionMask InterlockedDecrement GetNamedPipeHandleStateA LocalFlags GetNumberFormatA ReadConsoleW GetWindowsDirectoryA WriteFile GetCommandLineA GlobalAlloc GetLocaleInfoW ReadConsoleInputA SetConsoleCP GetBinaryTypeA CreateFileW CreateActCtxA FindNextVolumeMountPointW GetStartupInfoW CreateJobObjectA GetCPInfoExW GetLastError GetProcAddress HeapSize IsValidCodePage VerLanguageNameW LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW GetConsoleScreenBufferInfo MoveFileA BuildCommDCBAndTimeoutsW GetModuleHandleA SetProcessShutdownParameters LocalSize OpenFileMappingA GetProfileSectionW ExpandEnvironmentStringsW FlushFileBuffers WriteConsoleW SetStdHandle WideCharToMultiByte InterlockedIncrement InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree DeleteFileA HeapSetInformation GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent GetACP GetOEMCP TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType ExitProcess GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode LoadLibraryW CloseHandle

user32

CharToOemBuffW CharUpperW

Sharing