file[.]exe | Triage™

General

Target
file.exe
Size 222KB
Sample240315-2kcxpsef29
SHA256 50c5fa2b2078b52d54657e174f05dcc98bd3e409eeef19baf60b65f041bfe5d2
MD5 9c1da8b1d3b039cb60be5a47ef2889c5
SHA1 a759a61d392c040fae148756d15bdb625899491a
SHA512 e46c01f7afc420e682138523386434cd256ddfeee306d287833ee0570db0c9729aada175454c96fe700b3cba7f004399eb99011b32f47d6cad3e22fc95a80241
SSDEEP 3072:mkAodp8N/dorgUDXqlo3+/PU3FhyIY2JOmUH3hR6TbML1P4kAu8TMGz5:mkAoj8N/+xXt+/83+lH3hKAL1ZAuwnF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 222KB

file.exe

IMPHASH a0ac5f6845aed1cc4ba54b792069e5a1
SHA256 50c5fa2b2078b52d54657e174f05dcc98bd3e409eeef19baf60b65f041bfe5d2
MD5 9c1da8b1d3b039cb60be5a47ef2889c5
SHA1 a759a61d392c040fae148756d15bdb625899491a
SHA512 e46c01f7afc420e682138523386434cd256ddfeee306d287833ee0570db0c9729aada175454c96fe700b3cba7f004399eb99011b32f47d6cad3e22fc95a80241
SSDEEP 3072:mkAodp8N/dorgUDXqlo3+/PU3FhyIY2JOmUH3hR6TbML1P4kAu8TMGz5:mkAoj8N/+xXt+/83+lH3hKAL1ZAuwnF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA HeapAlloc SystemTimeToFileTime InterlockedDecrement ReadConsoleOutputAttribute CreateJobObjectW HeapFree GetProfileSectionA GetNumaAvailableMemoryNode GlobalAlloc LoadLibraryW GetFileAttributesA GetTimeFormatW LocalReAlloc GetModuleFileNameW CreateFileW MultiByteToWideChar FindNextVolumeMountPointW RaiseException SetThreadLocale GetLastError GetCurrentDirectoryW HeapSize SetComputerNameA ResetEvent GetAtomNameA CreatePipe BuildCommDCBA VirtualProtect SetCalendarInfoA FindAtomW GetProcAddress GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapReAlloc IsProcessorFeaturePresent LCMapStringW GetStringTypeW

user32

GetMonitorInfoA

Sharing