file[.]exe | Triage™

General

Target
file.exe
Size 380KB
Sample240909-ymhzysyfre
SHA256 a5984de1d09d8df2b72ece2ebd866940524c67720ae2a91725745a34b9e3ceb0
MD5 4331624cae3bc81d5c93c3f5ce1dc8f8
SHA1 b88c3ca1062f88421c883a1ce03e2860141d34b5
SHA512 20081860b2d8f66defbef0776b2d452d93b78fcb4d5cb1d79920d7f0951bb619c301ff0eeee0a2346aaa897b88af331d8318fa64d325cd39afbd1a185d97345d
SSDEEP 6144:FxvKT2q7ObpPaAMP9EoKRpEwEI9mDVEdsf:FQqIOb9aqoAEpIADE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 380KB

file.exe

IMPHASH 0f739547f18bee85b58b68f7772adb50
SHA256 a5984de1d09d8df2b72ece2ebd866940524c67720ae2a91725745a34b9e3ceb0
MD5 4331624cae3bc81d5c93c3f5ce1dc8f8
SHA1 b88c3ca1062f88421c883a1ce03e2860141d34b5
SHA512 20081860b2d8f66defbef0776b2d452d93b78fcb4d5cb1d79920d7f0951bb619c301ff0eeee0a2346aaa897b88af331d8318fa64d325cd39afbd1a185d97345d
SSDEEP 6144:FxvKT2q7ObpPaAMP9EoKRpEwEI9mDVEdsf:FQqIOb9aqoAEpIADE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW InterlockedDecrement GetCurrentProcess SetDefaultCommConfigW SetEnvironmentVariableW CreateJobObjectW UnlockFile CreateHardLinkA GetModuleHandleW GetTickCount FindNextVolumeMountPointA GetNumberFormatA SetCommState TlsSetValue GlobalAlloc SetFileShortNameW LoadLibraryW GetCalendarInfoW GetCalendarInfoA CreateEventA SetVolumeMountPointA GetConsoleAliasExesLengthW GetFileAttributesA VerifyVersionInfoA GetModuleFileNameW CreateActCtxA GetThreadPriorityBoost LCMapStringA InterlockedExchange GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW InterlockedIncrement GetProcAddress CreateNamedPipeA GetProcessVersion CreateFileMappingW GlobalWire EnumDateFormatsA EnumResourceNamesA VirtualProtect OpenEventW PeekConsoleInputA GetShortPathNameW SetProcessShutdownParameters GetDiskFreeSpaceExA ReadConsoleInputW GetWindowsDirectoryW DebugBreak GetTempPathA EnumCalendarInfoExA LocalFree CommConfigDialogW CloseHandle WriteConsoleW FlushFileBuffers GetConsoleMode CreateFileW GetConsoleCP SetEndOfFile GetConsoleAliasExesA GetLocaleInfoA SetLastError PeekNamedPipe MultiByteToWideChar HeapFree HeapAlloc EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent HeapCreate ExitProcess WriteFile GetStdHandle Sleep HeapSize SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte LCMapStringW GetStringTypeW RaiseException HeapReAlloc RtlUnwind SetStdHandle

user32

CharUpperA DrawStateA LoadMenuW GetWindowLongA GetSysColor GetCaretPos SetMenu GetMenuStringW

gdi32

GetCharWidthFloatA CreateDCA GetCharWidth32A GetBkMode

Sharing