file[.]exe | Triage™

General

Target
file.exe
Size 959KB
Sample231208-yldzlscccl
SHA256 01610d02adf2f0064b0e6f00fcfcc1c3dca465927c98cbd5dfa7fccb4d86b7f7
MD5 91d07516d4d59752ee621b27f2fc5506
SHA1 41248d97544a1b797dbeb22adc5de24b74ff948e
SHA512 6c01e49a09176cc9d059a798925adf912bf5e5a5f855d245541d42301e9213fedd6bc99514db7562ec4349b284f6ded0d07fdd6ce2a69b36e6b1e6405824633d
SSDEEP 24576:83FweEq/IoufNR2wKM0mK4U9MdUDSkkF6gELvxOVbQOQ:aEq/Tu6k0rMtFf1Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 959KB

file.exe

IMPHASH c5c445b50fcdfbfd65e18ac43adc31c9
SHA256 01610d02adf2f0064b0e6f00fcfcc1c3dca465927c98cbd5dfa7fccb4d86b7f7
MD5 91d07516d4d59752ee621b27f2fc5506
SHA1 41248d97544a1b797dbeb22adc5de24b74ff948e
SHA512 6c01e49a09176cc9d059a798925adf912bf5e5a5f855d245541d42301e9213fedd6bc99514db7562ec4349b284f6ded0d07fdd6ce2a69b36e6b1e6405824633d
SSDEEP 24576:83FweEq/IoufNR2wKM0mK4U9MdUDSkkF6gELvxOVbQOQ:aEq/Tu6k0rMtFf1Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16419

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNativeSystemInfo FindFirstChangeNotificationW TlsGetValue SystemTimeToTzSpecificLocalTime GlobalAddAtomA EndUpdateResourceW InterlockedIncrement GetCurrentProcess CreateJobObjectW SetComputerNameW GetComputerNameW OpenSemaphoreA GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetWindowsDirectoryA EnumTimeFormatsW GlobalAlloc SetFileShortNameW GlobalFindAtomA Sleep SizeofResource GetConsoleAliasExesLengthW FormatMessageW GetDateFormatW CreateFileW LCMapStringA InterlockedExchange GetLastError SetLastError BackupRead GetProcAddress VirtualAlloc BeginUpdateResourceW EnumDateFormatsExA LoadLibraryA InterlockedExchangeAdd CreateFileMappingW FindFirstVolumeMountPointW HeapLock FoldStringA FindFirstVolumeMountPointA VirtualProtect GetVersionExA TerminateJobObject DeleteTimerQueueTimer ReadConsoleOutputCharacterW SetConsoleCursorPosition GetFullPathNameW UnhandledExceptionFilter SetUnhandledExceptionFilter ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA RaiseException

gdi32

SetDeviceGammaRamp

Sharing