3[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
3.exe
Size 321KB
Sample240625-rj3fvsvbnf
SHA256 9435c630c2855fbde8d467080e0b9259a324eebfa4ef2dfeddf9133e9e4bc37e
MD5 53f9423bd7247c160c4051bf482991df
SHA1 8e636a31232d33e703c8f6d8e3299ea98cf0da7c
SHA512 09851ad813333237e1bf1cf8b5f7eb0bb1311d33f24e39a5c9e2ec637e208f8a2e0a37ee772e13f2984350ebd5786bedbbd086a793c6e03bcd8ca3d5c82abf75
SSDEEP 3072:EH4Lgr6jyhxaLKRdqn2MdLZaDaOvs5xXt4Ltnu1Ek1EJxTEqS:EYL06j2AeIn2OLYmOv0d8nINH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3.exe

File Explorer

3.exe

.exe 321KB

3.exe

IMPHASH 4345ed51b7bcdd336807a3f5f786979a
SHA256 9435c630c2855fbde8d467080e0b9259a324eebfa4ef2dfeddf9133e9e4bc37e
MD5 53f9423bd7247c160c4051bf482991df
SHA1 8e636a31232d33e703c8f6d8e3299ea98cf0da7c
SHA512 09851ad813333237e1bf1cf8b5f7eb0bb1311d33f24e39a5c9e2ec637e208f8a2e0a37ee772e13f2984350ebd5786bedbbd086a793c6e03bcd8ca3d5c82abf75
SSDEEP 3072:EH4Lgr6jyhxaLKRdqn2MdLZaDaOvs5xXt4Ltnu1Ek1EJxTEqS:EYL06j2AeIn2OLYmOv0d8nINH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommProperties GetModuleHandleW GetTickCount EnumCalendarInfoExW ReadConsoleOutputA GlobalAlloc LoadLibraryW SetVolumeMountPointA GetConsoleAliasExesLengthW lstrcpynW LocalReAlloc WriteConsoleW GetModuleFileNameW GetConsoleAliasesW InterlockedExchange GetLastError GetUserDefaultLCID LoadLibraryA UnhandledExceptionFilter AddAtomA OpenJobObjectW FoldStringW GetCommTimeouts lstrcatW OpenFileMappingW GetConsoleTitleW BuildCommDCBA FindFirstVolumeW GlobalAddAtomW AreFileApisANSI GetNumaProcessorNode CreateJobObjectW GetProcAddress GetComputerNameA HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

gdi32

GetCharWidth32W

advapi32

EnumDependentServicesW

ole32

CoTaskMemFree