file[.]exe | Triage™

General

Target
file.exe
Size 306KB
Sample240130-enhwssgba2
SHA256 96ef0fa612962e229cabe7c23fcd099a34fc49e3dc760aafbddc6c44358db341
MD5 582200a724af12a4a525bf2ae4d8b75b
SHA1 a7dba48a45fa92a8649e7eb26d9b571ee1080644
SHA512 280e6a29bfb7eb6fc753af60add534d01f97ccbfc82895419f21068c1c8c6b9c3ea12eb9280c27284c1210f7f246fae2409868ea1c4662ce6901c15943a47491
SSDEEP 6144:bt5/EuhHWN6cANbJr0T/gkfGCUKv/mXGGpYj3:p5suhHWN6cobZY/gkf0XG4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 306KB

file.exe

IMPHASH 0f86209308d034305701c953de1bb53c
SHA256 96ef0fa612962e229cabe7c23fcd099a34fc49e3dc760aafbddc6c44358db341
MD5 582200a724af12a4a525bf2ae4d8b75b
SHA1 a7dba48a45fa92a8649e7eb26d9b571ee1080644
SHA512 280e6a29bfb7eb6fc753af60add534d01f97ccbfc82895419f21068c1c8c6b9c3ea12eb9280c27284c1210f7f246fae2409868ea1c4662ce6901c15943a47491
SSDEEP 6144:bt5/EuhHWN6cANbJr0T/gkfGCUKv/mXGGpYj3:p5suhHWN6cobZY/gkf0XG4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait GetConsoleAliasesLengthW EnumDateFormatsExW GetLocaleInfoA MoveFileExA GetConsoleAliasExesLengthA FindResourceW SystemTimeToTzSpecificLocalTime HeapAlloc EndUpdateResourceW InterlockedIncrement SetDefaultCommConfigW CreateDirectoryW FreeEnvironmentStringsA GetTickCount GetConsoleAliasesA GetSystemTimes WideCharToMultiByte LoadLibraryW GetAtomNameW ReadFile CompareStringW GetStartupInfoW ReleaseSemaphore WritePrivateProfileStringW SetCurrentDirectoryA GetLastError GetProcAddress GetProcessHeaps OpenWaitableTimerA LoadLibraryA LocalAlloc OpenJobObjectW GlobalWire EnumCalendarInfoExA GetVolumeInformationW EnumSystemLocalesA GetUserDefaultLCID CreateFileW EncodePointer DecodePointer GetCommandLineW HeapSetInformation RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree IsProcessorFeaturePresent Sleep HeapSize GetModuleHandleW ExitProcess EnterCriticalSection LeaveCriticalSection WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer CloseHandle WriteConsoleW SetStdHandle IsValidLocale

user32

LookupIconIdFromDirectory SetKeyboardState

Sharing