Script[.]exe | Triage™

General

Target
Script.exe
Size 436KB
Sample240410-vxmt4seh24
SHA256 0372f8e2ae02cf9e52cbd226ff8e1f5fd3c0404858dc41439dd2fe49adfbfadf
MD5 db9f3a98bc34ba5cd74ea5fdbac2fd64
SHA1 9521048c031804b3a004e8817d814fd388de4ebd
SHA512 19ab07f4368d7b91a703b65ee7bc7dc7ddaf3f4a1f10561ac7b38d258bcf1f06c26a7dd3945d2e50bf05ecff65c7219f47aa26fcc59c7586a76e8b13e8ae6b9d
SSDEEP 6144:qM0jq5dOzh7bSLd0dRwVA8mIXagfTG6O0L4WP2UZia8xNeI/rr3S3U:90jq5dYj8vXagfTG6O0LcUkxNH3S3U
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Script.exe

File Explorer

Script.exe

.exe 436KB

Script.exe

IMPHASH dcdd7fda4b828a13bab9a0dd63981aa0
SHA256 0372f8e2ae02cf9e52cbd226ff8e1f5fd3c0404858dc41439dd2fe49adfbfadf
MD5 db9f3a98bc34ba5cd74ea5fdbac2fd64
SHA1 9521048c031804b3a004e8817d814fd388de4ebd
SHA512 19ab07f4368d7b91a703b65ee7bc7dc7ddaf3f4a1f10561ac7b38d258bcf1f06c26a7dd3945d2e50bf05ecff65c7219f47aa26fcc59c7586a76e8b13e8ae6b9d
SSDEEP 6144:qM0jq5dOzh7bSLd0dRwVA8mIXagfTG6O0L4WP2UZia8xNeI/rr3S3U:90jq5dYj8vXagfTG6O0LcUkxNH3S3U
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comdlg32

GetSaveFileNameA GetOpenFileNameA

user32

GetDlgItemTextA wsprintfA MessageBoxA LoadCursorA GetClassInfoA CheckDlgButton SetWindowLongA CallWindowProcA GetActiveWindow

kernel32

WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers VirtualProtect VirtualAlloc LoadLibraryA GetProcAddress lstrlenW CreateThread Sleep WaitForSingleObject FreeConsole QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess HeapReAlloc RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW GetProcessHeap HeapSize DecodePointer

Sharing