file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 2.7MB
Sample231210-mhm8bsdaeq
SHA256 b586cd5cc5bbadea857316df1beef274e754c31be660ea66a411c55510cb17ec
MD5 879ffb081a6536b52dd02fc4ea14d96e
SHA1 c1c06f71c08b4075fda2cc91e1f8c4b68aa75398
SHA512 6bbde3b76778f6ab54c7170b20711dbcbeb8b4b2d6f808de2bfb45288c413902b5d710f0916d8e1f60196d8ca6866c50e56b1ca2ad8cf6fd3500c7c8a0fe269e
SSDEEP 49152:B8VlgzBl6xKvh8G3jaR6p6KnfKH7LS0+mRcyY3/+UFgVkIfY2gx/GaYDomMq/7:B8VlgGMh8kuR6p6Ks/S0ZRgNIf/J/M2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 2.7MB

file.exe

IMPHASH 94af7f0728c275a2ef6a6a6c552117f9
SHA256 b586cd5cc5bbadea857316df1beef274e754c31be660ea66a411c55510cb17ec
MD5 879ffb081a6536b52dd02fc4ea14d96e
SHA1 c1c06f71c08b4075fda2cc91e1f8c4b68aa75398
SHA512 6bbde3b76778f6ab54c7170b20711dbcbeb8b4b2d6f808de2bfb45288c413902b5d710f0916d8e1f60196d8ca6866c50e56b1ca2ad8cf6fd3500c7c8a0fe269e
SSDEEP 49152:B8VlgzBl6xKvh8G3jaR6p6KnfKH7LS0+mRcyY3/+UFgVkIfY2gx/GaYDomMq/7:B8VlgGMh8kuR6p6Ks/S0ZRgNIf/J/M2
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

92114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocStringLen VariantClear SysStringLen

user32

DialogBoxParamW SetWindowLongW GetWindowLongW GetDlgItem LoadStringW CharUpperW DestroyWindow EndDialog PostMessageW SetWindowTextW ShowWindow MessageBoxW SetTimer SendMessageW LoadIconW KillTimer

shell32

ShellExecuteExW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex wcsstr free malloc memcpy _CxxThrowException _purecall memmove memcmp wcscmp __CxxFrameHandler memset

kernel32

GetStartupInfoA InitializeCriticalSection ResetEvent SetEvent CreateEventW lstrlenW lstrcatW VirtualFree VirtualAlloc Sleep WaitForMultipleObjects GetFileInformationByHandle GetStdHandle SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindClose GetCurrentThreadId GetTickCount GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW GetModuleHandleW GetProcAddress RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime GetSystemDirectoryW FormatMessageW LocalFree SetCurrentDirectoryW GetModuleFileNameW LoadLibraryExW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetVersionExW GetCommandLineW CreateProcessW CloseHandle WaitForSingleObject