file[.]exe | Triage™

General

Target
file.exe
Size 312KB
Sample240109-qec5qsbbdk
SHA256 e6e106a5206be28f2b76c0190d3c1ba85d4f4bf759babd66c64d9a17a4219ddb
MD5 55cc830f41f9e74fbcfe2259d304c99b
SHA1 f72fd071a6df30d6b0f145463ed4fe2f7d248e2b
SHA512 293f62b48bda53c1d575636d30813cbb49865ee0d67302c001db3b1fec1de22a8fd2ae3945eca10903e15ee579e5ca22599fb8fb5a03594f593144c36c3aa131
SSDEEP 3072:rjEaOZ+J2LBo0V/NqF4wDa98Egq4IlmWUkbKUGn9zSw5n2iT9BARTYFkc:rSZ/LS0xNKr+9vdlm6bKUGnZnT3Fk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 312KB

file.exe

IMPHASH ec80820dcdf2b0e0211f84cab39e704c
SHA256 e6e106a5206be28f2b76c0190d3c1ba85d4f4bf759babd66c64d9a17a4219ddb
MD5 55cc830f41f9e74fbcfe2259d304c99b
SHA1 f72fd071a6df30d6b0f145463ed4fe2f7d248e2b
SHA512 293f62b48bda53c1d575636d30813cbb49865ee0d67302c001db3b1fec1de22a8fd2ae3945eca10903e15ee579e5ca22599fb8fb5a03594f593144c36c3aa131
SSDEEP 3072:rjEaOZ+J2LBo0V/NqF4wDa98Egq4IlmWUkbKUGn9zSw5n2iT9BARTYFkc:rSZ/LS0xNKr+9vdlm6bKUGnZnT3Fk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8075

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA FindResourceW InterlockedIncrement InterlockedCompareExchange GetComputerNameW CreateHardLinkA GetTickCount GlobalFindAtomA LoadLibraryW SetCommConfig GetLocaleInfoW SetConsoleMode WriteConsoleW SetComputerNameExW GetStartupInfoW GetLastError GetConsoleAliasesLengthW GetProcAddress VirtualAlloc SetComputerNameA LoadLibraryA LocalAlloc QueryDosDeviceW AddAtomA lstrcmpiW GetModuleHandleA IsDebuggerPresent CancelTimerQueueTimer GetCurrentProcessId ResetWriteWatch DeleteFileA FindFirstChangeNotificationW SetLastError SetThreadContext GetModuleHandleW Sleep ExitProcess HeapAlloc HeapFree RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

gdi32

GetCharABCWidthsFloatA DeleteMetaFile

shell32

DuplicateIcon

Sharing