file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 3.0MB
Sample231208-v4vtasdaf3
SHA256 4523c6afcb7c87ba12cc2de09d64ef43a56aebea9b04b0c10aa011e9180b000e
MD5 8fa20feddfbe6a540e99e702de66d9a0
SHA1 eccfe37f43bf1a98c7f2baa6e16283ac0b92268f
SHA512 b885bba6be1e277ab368f7581d4309c61b231dae0648f469fbfe902aa71ae54f450b4226f6c1e7d0a6602462b92f6949e6cc6691ac2d2176556ba0fb3baed0fa
SSDEEP 98304:WDuFi0u+TGo/AYsOpCKXQhSVkbfWjE/WeJYDkYLyn:WDu9Go//5QXjW6JYVLyn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 3.0MB

file.exe

IMPHASH 1d0e3506c01cb61e9312cbea4911e92e
SHA256 4523c6afcb7c87ba12cc2de09d64ef43a56aebea9b04b0c10aa011e9180b000e
MD5 8fa20feddfbe6a540e99e702de66d9a0
SHA1 eccfe37f43bf1a98c7f2baa6e16283ac0b92268f
SHA512 b885bba6be1e277ab368f7581d4309c61b231dae0648f469fbfe902aa71ae54f450b4226f6c1e7d0a6602462b92f6949e6cc6691ac2d2176556ba0fb3baed0fa
SSDEEP 98304:WDuFi0u+TGo/AYsOpCKXQhSVkbfWjE/WeJYDkYLyn:WDu9Go//5QXjW6JYVLyn
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

105740

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocStringLen VariantClear SysStringLen

user32

DialogBoxParamW SetWindowLongW GetWindowLongW GetDlgItem LoadStringW CharUpperW DestroyWindow EndDialog PostMessageW SetWindowTextW ShowWindow MessageBoxW SetTimer SendMessageW LoadIconW KillTimer

shell32

ShellExecuteExW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memset wcsstr free malloc memcpy _CxxThrowException _purecall memmove memcmp wcscmp __CxxFrameHandler

kernel32

GetStartupInfoA InitializeCriticalSection ReleaseSemaphore CreateSemaphoreW ResetEvent SetEvent CreateEventW lstrlenW lstrcatW VirtualFree VirtualAlloc Sleep GetStdHandle GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetFileInformationByHandle GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindClose GetCurrentThreadId GetTickCount GetTempPathW GetCurrentDirectoryW SetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW GetModuleHandleW GetProcAddress RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime GetSystemDirectoryW GetCurrentProcessId FormatMessageW LocalFree GetModuleFileNameW LoadLibraryExW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetVersionExW GetCommandLineW CreateProcessW CloseHandle WaitForSingleObject