file[.]exe | Triage™

General

Target
file.exe
Size 227KB
Sample240106-tdb3tsbebl
SHA256 6c5eea2d93dc13108a6020ae7f0bf6f432d0c99ddae8edbc4ed56557c497bf91
MD5 01c1f9a5f7239deb1b2d677d2a3ffe3a
SHA1 84d309197ee936daeca6c345be6d61090b2a6524
SHA512 37e3926e6ad0134f54a14079145636375a546b82c972dff2b7838a0f1266f27520224098002212dd7f9ac40aded3e648250d3386811b1854943a3d7dc1fb9ce2
SSDEEP 3072:oah/GOMLJLAHYEoW90C3sHOuOp9pctKXtOvJ4yac+mVHdOJW3fb5H+hi9:oaGHLNAnoUsHOZ9pctKEBl+m1gW5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 227KB

file.exe

IMPHASH 61d268ee3426305d6d7ceb3569462cf1
SHA256 6c5eea2d93dc13108a6020ae7f0bf6f432d0c99ddae8edbc4ed56557c497bf91
MD5 01c1f9a5f7239deb1b2d677d2a3ffe3a
SHA1 84d309197ee936daeca6c345be6d61090b2a6524
SHA512 37e3926e6ad0134f54a14079145636375a546b82c972dff2b7838a0f1266f27520224098002212dd7f9ac40aded3e648250d3386811b1854943a3d7dc1fb9ce2
SSDEEP 3072:oah/GOMLJLAHYEoW90C3sHOuOp9pctKXtOvJ4yac+mVHdOJW3fb5H+hi9:oaGHLNAnoUsHOZ9pctKEBl+m1gW5
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8107

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement QueryDosDeviceA InterlockedCompareExchange SetComputerNameW GetComputerNameW CreateHardLinkA GetTickCount VirtualFree GlobalFindAtomA LoadLibraryW SetCommConfig GetLocaleInfoW SetConsoleMode WriteConsoleW SetComputerNameExW SetThreadPriority GetStartupInfoW WriteConsoleOutputCharacterA SetLastError GetProcAddress VirtualAlloc LoadLibraryA LocalAlloc TransmitCommChar AddAtomW FindFirstVolumeMountPointA lstrcmpiW GetModuleHandleA FindFirstChangeNotificationA IsDebuggerPresent GetCurrentProcessId ResetWriteWatch DeleteFileA GetConsoleAliasesLengthW GetLastError SetThreadContext GetModuleHandleW Sleep ExitProcess HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

gdi32

GetCharABCWidthsFloatA DeleteMetaFile

shell32

ShellAboutW

Sharing