file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 313KB
Sample240709-xprjfazdml
SHA256 7b2ece053ca47f1dfc2199e5872a4a273ccac740a0ceef209fa8d7867e6cf646
MD5 a35d3d3962f72c6573ba6c51d9c5df0d
SHA1 71ba599e80cb39c1247fc61ead2533617fe47bbe
SHA512 583f1c253bd8f74867ac5de36461dc8e6cc75f66ff77ec58d35e35577ea25eeb3de139735f8b68a743daa0d0b296a70dcc61a029b1b930cbfd68b33439c73c06
SSDEEP 3072:i9ssO3MCpj2JU5XArpofsLrIzGgkC1koUdA7k6KX2uUmwp8JjB:QssO3MCpCuRqB1gkKkoUdM0muUJp8NB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 313KB

file.exe

IMPHASH b18351593449506f4a27066556c25f68
SHA256 7b2ece053ca47f1dfc2199e5872a4a273ccac740a0ceef209fa8d7867e6cf646
MD5 a35d3d3962f72c6573ba6c51d9c5df0d
SHA1 71ba599e80cb39c1247fc61ead2533617fe47bbe
SHA512 583f1c253bd8f74867ac5de36461dc8e6cc75f66ff77ec58d35e35577ea25eeb3de139735f8b68a743daa0d0b296a70dcc61a029b1b930cbfd68b33439c73c06
SSDEEP 3072:i9ssO3MCpj2JU5XArpofsLrIzGgkC1koUdA7k6KX2uUmwp8JjB:QssO3MCpCuRqB1gkKkoUdM0muUJp8NB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA IsBadStringPtrW CommConfigDialogA SetEndOfFile FindResourceW LocalCompact WriteConsoleInputA GetComputerNameW SetProcessPriorityBoost GlobalFindAtomA LoadLibraryW FreeConsole CreateEventA GetModuleFileNameW CreateFileW GetACP ReplaceFileA CreateDirectoryA GetLastError RemoveVectoredExceptionHandler GetProcAddress GlobalFree LocalAlloc EnumResourceTypesW GetModuleHandleA CancelIo GetWindowsDirectoryW OpenFileMappingA SetFileAttributesW HeapReAlloc HeapAlloc HeapSize GetStringTypeW SetLastError GetDateFormatW MultiByteToWideChar LCMapStringW RtlUnwind Sleep HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent HeapCreate SetUnhandledExceptionFilter GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection RaiseException

user32

GetKeyboardLayoutNameA SetMessageExtraInfo GetCaretPos DdeCmpStringHandles GetClassInfoW InsertMenuItemW CharUpperBuffA

advapi32

GetLengthSid

ole32

CoSuspendClassObjects CoMarshalHresult

winhttp

WinHttpWriteData