SGn3RtDC8Y[.]exe | Triage™

General

Target
SGn3RtDC8Y.exe
Size 308KB
Sample240805-v65raatall
SHA256 4f14009eb3fcc7dae430cce6bb1a0a830adda753d234d3621cee0014d686321e
MD5 3ca2945c2c97310afef97e0c889cb8ec
SHA1 8c966c390528be4c4212106e9a7e235bf628f269
SHA512 1ddae2b47e39ed822e063bd749e6d51c4a815239bf3fbe222a4cccdfd681d419427bf28ad19c26efec3bc72b840f92de05663848b7dd7ec77bc817ee2220655c
SSDEEP 3072:450fnzC44jWJ5jj0GpS9bfyZ2RG0xacKyPssuQXF5aM5S1FjVQq2T0:jPzjR5X0G4bf62VxUHsuQCMg1FJQq2T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SGn3RtDC8Y.exe

File Explorer

SGn3RtDC8Y.exe

.exe 308KB

SGn3RtDC8Y.exe

IMPHASH b06a0c09a322281148d5729ca5d14149
SHA256 4f14009eb3fcc7dae430cce6bb1a0a830adda753d234d3621cee0014d686321e
MD5 3ca2945c2c97310afef97e0c889cb8ec
SHA1 8c966c390528be4c4212106e9a7e235bf628f269
SHA512 1ddae2b47e39ed822e063bd749e6d51c4a815239bf3fbe222a4cccdfd681d419427bf28ad19c26efec3bc72b840f92de05663848b7dd7ec77bc817ee2220655c
SSDEEP 3072:450fnzC44jWJ5jj0GpS9bfyZ2RG0xacKyPssuQXF5aM5S1FjVQq2T0:jPzjR5X0G4bf62VxUHsuQCMg1FJQq2T
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

23437

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateNamedPipeW GetConsoleAliasesA GetNumberFormatA EnumTimeFormatsA GetConsoleCP GlobalAlloc SetFileShortNameW LoadLibraryW FatalAppExitW CreateEventA GetConsoleAliasW HeapValidate ReplaceFileW GetModuleFileNameW GetSystemDirectoryA GlobalUnlock CreateJobObjectA LCMapStringA GetLastError SetLastError GetProcAddress IsBadHugeWritePtr CreateJobSet LoadLibraryA GetTickCount SetConsoleCtrlHandler AddAtomW QueryDosDeviceW HeapWalk SetEnvironmentVariableA GetOEMCP GetModuleHandleA GetProcessShutdownParameters EnumResourceNamesA RequestWakeupLatency EnumDateFormatsW PeekConsoleInputA GetDiskFreeSpaceExA GetCurrentProcessId GetProcessHeap SetEndOfFile GetStringTypeW LCMapStringW MultiByteToWideChar WriteConsoleW GetModuleHandleW GetConsoleAliasesLengthW CreateFileA CreateFileMappingA EnumResourceNamesW HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection RtlUnwind SetFilePointer HeapCreate CloseHandle RaiseException ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetSystemTimeAsFileTime Sleep GetConsoleMode GetCPInfo GetACP IsValidCodePage ReadFile SetStdHandle FlushFileBuffers HeapSize CreateFileW

user32

ChangeMenuA GetDC DrawStateA CharUpperBuffA GetMenuState GetCaretPos GetSysColorBrush GetComboBoxInfo SetCaretPos

gdi32

GetCharWidthI CreateDCA CreateDCW GetCharWidthW

Sharing