main[.]exe | Triage™

General

Target
main.exe
Size 30.7MB
Sample240806-d67gfaseka
SHA256 d77ad43b474dd776144744546d3f85882b39794e7834448657b3de2a0957eb50
MD5 be71d00e9d0f2902f25cb2fa94c3917a
SHA1 b9338661dfa05312e5329479f8e1a9b5c0e942f3
SHA512 2f484090f29435d7a4c30863d2ee578b42040b348f97189c2af128e675843dc4803b9c955f1ca140e69b55477756da1f4142bb78f7bc7902d2d5d6f16ff46ad0
SSDEEP 786432:8sHi2fmtUFJWs97HWE5dvQN/xNObO+CEA0:1fIUW0D52SyzEA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
main.exe

File Explorer

main.exe

.exe 30.7MB

main.exe

IMPHASH 8e3dad4d4ea6736338bcc4aca7b446c9
SHA256 d77ad43b474dd776144744546d3f85882b39794e7834448657b3de2a0957eb50
MD5 be71d00e9d0f2902f25cb2fa94c3917a
SHA1 b9338661dfa05312e5329479f8e1a9b5c0e942f3
SHA512 2f484090f29435d7a4c30863d2ee578b42040b348f97189c2af128e675843dc4803b9c955f1ca140e69b55477756da1f4142bb78f7bc7902d2d5d6f16ff46ad0
SSDEEP 786432:8sHi2fmtUFJWs97HWE5dvQN/xNObO+CEA0:1fIUW0D52SyzEA
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Password

asdadada

Minor OS version

0

Major OS version

6

Entry point

50876

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

SetLastError WriteConsoleW HeapReAlloc CreateDirectoryW SizeofResource SetConsoleCtrlHandler GetCommandLineW GetStdHandle WriteFile TerminateProcess GetModuleFileNameW SetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW GetFileAttributesW Sleep GetLastError LockResource CloseHandle LoadResource GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapSize RtlUnwindEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx

Sharing