987123[.]exe | Triage™

General

Target
987123.exe
Size 282KB
Sample240312-e3gbhsac83
SHA256 68120a16380509e3cd084aa1b5c0bc59103883f23b0763b779c1ab5975f8f4b5
MD5 6eb1204ff970d0e8db7c08660321572a
SHA1 2677a45ac2737cea901b3a22648b02b00deac314
SHA512 e80974b3823613bc7ac0b74f2c2c0c22fefbbede0c60e94f61e9dbc1973458917b241371c8dc5b4276497accb8a021801586792c162522207efa24edc8d2a7f3
SSDEEP 3072:GP+Yp2t4s8QpoDw/vOljC+TsejVEnxkfpwQcju/+kM7WVE8Eii2xW8rEy:uyt98Q3/nQsepqxkxSy+kM7WEHOE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
987123.exe

File Explorer

987123.exe

.exe 282KB

987123.exe

IMPHASH 400a1fdc858ff9b2d07a8786c4bdfa3f
SHA256 68120a16380509e3cd084aa1b5c0bc59103883f23b0763b779c1ab5975f8f4b5
MD5 6eb1204ff970d0e8db7c08660321572a
SHA1 2677a45ac2737cea901b3a22648b02b00deac314
SHA512 e80974b3823613bc7ac0b74f2c2c0c22fefbbede0c60e94f61e9dbc1973458917b241371c8dc5b4276497accb8a021801586792c162522207efa24edc8d2a7f3
SSDEEP 3072:GP+Yp2t4s8QpoDw/vOljC+TsejVEnxkfpwQcju/+kM7WVE8Eii2xW8rEy:uyt98Q3/nQsepqxkxSy+kM7WEHOE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

39888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId GetExitCodeThread GetLastError SetHandleInformation GetTickCount OpenMutexW LoadLibraryA GetModuleFileNameA SetEnvironmentVariableA FindResourceW GlobalFindAtomA GetWindowsDirectoryW GetCurrentDirectoryW CreateDirectoryA RemoveDirectoryA CreateFileW GlobalAlloc GetVolumeInformationA GetVersionExA FindNextVolumeMountPointW GetLocaleInfoW GetNumberFormatA EnumTimeFormatsA ReadConsoleInputA AttachConsole ReadConsoleA WriteConsoleW AddConsoleAliasW GetConsoleAliasesLengthA GetConsoleAliasExesLengthW ReadFile SetEndOfFile CloseHandle SetFilePointerEx SetStdHandle GetFileAttributesExW GetProcAddress EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapAlloc RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent HeapFree HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetProcessHeap FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType GetCurrentThreadId QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW HeapReAlloc OutputDebugStringW GetStringTypeW ReadConsoleW

user32

CharUpperBuffW GetClassInfoA LoadKeyboardLayoutA CharLowerA

gdi32

SetTextColor

Sharing