file[.]exe | Triage™

General

Target
file.exe
Size 318KB
Sample240723-mc4ccs1blb
SHA256 164865d694e4965f098342edfd6aa0271ff757948813f74f7eb4138fcf596932
MD5 8e1c4dac83c660054a4b424ba20ddb96
SHA1 f3596f5c0b2c550068f660aef673f55c9b885691
SHA512 67ed3498acfa05734951ff114aee157a53547a868dc89f5c2e43c1960a711224efe184d6def00cf153a138c630422d0b284514480bd59b49b688cd0a0fda7085
SSDEEP 3072:QpVWM1j0XfA17XHOhuq/kkZDrsgpy+FDMjBdJ05CrrBrwlzTPCd/IbEiTA:QXdH73GNrskFsSwrmCl8EiT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 318KB

file.exe

IMPHASH 4329e038278f5d378cfd12b13b5765ba
SHA256 164865d694e4965f098342edfd6aa0271ff757948813f74f7eb4138fcf596932
MD5 8e1c4dac83c660054a4b424ba20ddb96
SHA1 f3596f5c0b2c550068f660aef673f55c9b885691
SHA512 67ed3498acfa05734951ff114aee157a53547a868dc89f5c2e43c1960a711224efe184d6def00cf153a138c630422d0b284514480bd59b49b688cd0a0fda7085
SSDEEP 3072:QpVWM1j0XfA17XHOhuq/kkZDrsgpy+FDMjBdJ05CrrBrwlzTPCd/IbEiTA:QXdH73GNrskFsSwrmCl8EiT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19619

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalCompact GlobalLock CreateHardLinkA GetModuleHandleW CreateNamedPipeW GetConsoleCP GlobalAlloc LoadLibraryW IsProcessInJob CreateEventA GetSystemDirectoryA CreateJobObjectA GetConsoleAliasesW GetLastError SetLastError GetProcAddress GetProcessHeaps EnumDateFormatsExA VerLanguageNameW FindClose LoadLibraryA FindFirstVolumeMountPointW SetConsoleCtrlHandler SetEndOfFile HeapWalk EnumResourceTypesW SetEnvironmentVariableA GetModuleFileNameA GetOEMCP GetModuleHandleA EnumResourceNamesA FatalAppExitA PeekConsoleInputA SetProcessShutdownParameters SetFileShortNameA GetDiskFreeSpaceExA TerminateJobObject LCMapStringW CloseHandle WriteConsoleW FlushFileBuffers SetStdHandle GetConsoleMode HeapReAlloc GetStringTypeW AddAtomW IsBadHugeReadPtr InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent GetACP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ReadFile ExitProcess SetFilePointer WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CreateFileW

user32

CharUpperBuffW GetMessageExtraInfo DrawStateW SetMenu GetSysColorBrush SetCaretPos SetClipboardViewer

advapi32

RegSetValueA

Sharing