file[.]exe | Triage™

General

Target
file.exe
Size 252KB
Sample240226-sa1fkshc3v
SHA256 66bd683be370aca2b95c4f0a94d948b3b3c1a1b484f80e53c843d7333358d008
MD5 5f29b3293da509e03bfd5877fd4104bb
SHA1 3c089d6cae3dc577ddca459257b1b20b8ae4df6b
SHA512 ebaf78d7b741309a28a996506c2ed221b479e1647b38c4f61100d6825a9e2aee8a3afa483d8a3daacccbaaf5e75dfef00cbc0727fd50bf6ef473b94c114c4e55
SSDEEP 3072:DzaLHNoqzUka9U58B6STWSqxyFDCwVD2Q6L0Zutf+EetwFjsCtlgUZotDYoq:DOLHN/zai5mISPFPx2Q6L0Zux1jp7ge
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 252KB

file.exe

IMPHASH 340a1a5c45b02173e9fe46beff210098
SHA256 66bd683be370aca2b95c4f0a94d948b3b3c1a1b484f80e53c843d7333358d008
MD5 5f29b3293da509e03bfd5877fd4104bb
SHA1 3c089d6cae3dc577ddca459257b1b20b8ae4df6b
SHA512 ebaf78d7b741309a28a996506c2ed221b479e1647b38c4f61100d6825a9e2aee8a3afa483d8a3daacccbaaf5e75dfef00cbc0727fd50bf6ef473b94c114c4e55
SSDEEP 3072:DzaLHNoqzUka9U58B6STWSqxyFDCwVD2Q6L0Zutf+EetwFjsCtlgUZotDYoq:DOLHN/zai5mISPFPx2Q6L0Zux1jp7ge
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5693

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime SystemTimeToFileTime MoveFileExW InterlockedDecrement CreateDirectoryW GetUserDefaultLCID GetComputerNameW CreateNamedPipeW GetConsoleAliasesLengthA GetLocaleInfoW FatalAppExitW HeapCreate GetTapePosition ReplaceFileW LocalHandle GetTimeZoneInformation ReleaseSemaphore GetConsoleOutputCP GetProcessIoCounters GetCurrentDirectoryW SetLastError CreateTimerQueueTimer SetStdHandle SetFileAttributesA LoadLibraryA LocalAlloc AddAtomA lstrcatW VirtualProtect EnumDateFormatsW GetFileTime GetVolumeInformationW CreateFileW WriteConsoleW SetFilePointer GetConsoleAliasExesLengthA GetStdHandle DebugActiveProcessStop GetStringTypeW MultiByteToWideChar GetLastError HeapFree EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapAlloc Sleep HeapSize GetProcAddress GetModuleHandleW ExitProcess EnterCriticalSection LeaveCriticalSection CloseHandle WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc LoadLibraryW RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW

user32

SetActiveWindow SetKeyboardState CreateIcon GetClassLongA

advapi32

OpenThreadToken GetAce

ole32

CoTaskMemFree

Sharing