sample4[.]exe | Triage™

General

Target
sample4.exe
Size 536KB
Sample240407-cmermsah27
SHA256 70a7c05b84920869900bfb4d677f13d57ced658d907d495a1ffe66e1b0d420da
MD5 8cca1082f0cb2ab2b60025033d56af56
SHA1 f3f4fd5a12031d7d1f86bec1665576c5ddab2936
SHA512 9dd1780ec90e6affd740a52356479280d2877366b3f1f341e43117a17989e5b8711e2cb26fb6b47f8671603f891cdc6e4934e922cc28d507632f621b135ff494
SSDEEP 12288:YpfMhcqJOtdh15RgDKKw780M4Z2hHX34:YUNujRgy7hIh334
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sample4.exe

File Explorer

sample4.exe

.exe 536KB

sample4.exe

IMPHASH 0be152bdfc9ef291ebc79442873fbb26
SHA256 70a7c05b84920869900bfb4d677f13d57ced658d907d495a1ffe66e1b0d420da
MD5 8cca1082f0cb2ab2b60025033d56af56
SHA1 f3f4fd5a12031d7d1f86bec1665576c5ddab2936
SHA512 9dd1780ec90e6affd740a52356479280d2877366b3f1f341e43117a17989e5b8711e2cb26fb6b47f8671603f891cdc6e4934e922cc28d507632f621b135ff494
SSDEEP 12288:YpfMhcqJOtdh15RgDKKw780M4Z2hHX34:YUNujRgy7hIh334
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17110

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA GetConsoleAliasExesLengthA SetConsoleTextAttribute GetCurrentProcess QueryDosDeviceA GetModuleHandleW GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GlobalAlloc GetVolumeInformationA GetLocaleInfoW GetVersionExW GetConsoleAliasW WriteConsoleW SetSystemPowerState GetModuleFileNameW FindResourceA ExitThread GetLastError GetCurrentDirectoryW GetProcAddress PeekConsoleInputW RemoveDirectoryA LoadLibraryA FindFirstVolumeMountPointW GetNumberFormatW GlobalFindAtomW VirtualProtect GetCurrentProcessId CloseHandle SetStdHandle OutputDebugStringW LoadLibraryExW CreateFileW GetEnvironmentVariableW HeapReAlloc EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW HeapFree HeapAlloc ReadFile GetCommandLineA RaiseException RtlUnwind GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW LCMapStringW IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetCurrentThreadId GetProcessHeap ExitProcess GetModuleHandleExW GetStdHandle WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize SetFilePointerEx GetFileType GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW

user32

CharLowerA GetAltTabInfoA GetClassInfoA CharUpperBuffW DrawCaption

advapi32

ReadEventLogW

msimg32

AlphaBlend

Sharing