file[.]exe | Triage™

General

Target
file.exe
Size 136KB
Sample240220-y14tkseh68
SHA256 30845b56fd4b84afa4212a7c5130b4ee2c07924524c357ea21d4b79ef21fd2f5
MD5 1bc8dd1a5e08a1dcaeefb1a03f5c71eb
SHA1 9fbb0b46be6b7b0d60841f6c4d6940cdd1b4b08e
SHA512 5e8d3d808445684b08ec6e4b15d1a701c40bc80fb7d878695970a73f06fd318f6a812c7254dd7d61f74c1c36a0a989894dc80234374d9fc914142adcd9f6bc40
SSDEEP 1536:Y3HKFCXebMDnye3MtblERG2DnWQZWSqaiWz5AAm7FcNLuAfyEDyIEpovc29OhSc4:iHKCXeC3VdZWS5ijAm7FcUMyIrjksE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 136KB

file.exe

IMPHASH a37a56386d50d63537592aa5b62333a6
SHA256 30845b56fd4b84afa4212a7c5130b4ee2c07924524c357ea21d4b79ef21fd2f5
MD5 1bc8dd1a5e08a1dcaeefb1a03f5c71eb
SHA1 9fbb0b46be6b7b0d60841f6c4d6940cdd1b4b08e
SHA512 5e8d3d808445684b08ec6e4b15d1a701c40bc80fb7d878695970a73f06fd318f6a812c7254dd7d61f74c1c36a0a989894dc80234374d9fc914142adcd9f6bc40
SSDEEP 1536:Y3HKFCXebMDnye3MtblERG2DnWQZWSqaiWz5AAm7FcNLuAfyEDyIEpovc29OhSc4:iHKCXeC3VdZWS5ijAm7FcUMyIrjksE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5551

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA InterlockedDecrement GetSystemDefaultLCID GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GetProcessTimes LoadLibraryW GetLocaleInfoW SetConsoleCP HeapDestroy ReplaceFileA FlushFileBuffers CreateDirectoryA GetConsoleAliasesW ChangeTimerQueueTimer SetLastError GetProcAddress LocalUnlock SetStdHandle PrepareTape ResetEvent LoadLibraryA LocalAlloc AddAtomA DebugSetProcessKillOnExit lstrcatW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA FileTimeToLocalFileTime GetVolumeInformationW WriteConsoleW CloseHandle SetFilePointer CreateNamedPipeA GetComputerNameA GetConsoleMode GetConsoleCP HeapAlloc EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate Sleep HeapSize EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc RtlUnwind HeapFree WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW CreateFileW

user32

GetForegroundWindow GetClassLongA

advapi32

OpenThreadToken

ole32

CreateDataAdviseHolder

Sharing