file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 447KB
Sample240922-ag6xtssbpp
SHA256 7fad1d5bf3c2d3837f16a6fdf5f5be2af4bcdb2033d4b5124746f642affa00ae
MD5 519d960ec39fc4d49fe1dca29b955922
SHA1 3e9d24f64198fda4f148cde6692e47c4d76e037f
SHA512 0f35c37244b838f61be2c2fd3961a8c112a3b9c731f34739d0327e94743bda2a01c53d99ce8e1d0ce87fa8dfd029b552f4853b0971e17f1b432d408add26dbbc
SSDEEP 6144:XBcNUag7Hbrp2TgO6Au07C5jHK7u9rhllr5FXCnFk:XWCag7Hnp2sR0O5jHW8hP3SC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 447KB

file.exe

IMPHASH 2f3fb52e2448b38ca202de4ef9ca1d86
SHA256 7fad1d5bf3c2d3837f16a6fdf5f5be2af4bcdb2033d4b5124746f642affa00ae
MD5 519d960ec39fc4d49fe1dca29b955922
SHA1 3e9d24f64198fda4f148cde6692e47c4d76e037f
SHA512 0f35c37244b838f61be2c2fd3961a8c112a3b9c731f34739d0327e94743bda2a01c53d99ce8e1d0ce87fa8dfd029b552f4853b0971e17f1b432d408add26dbbc
SSDEEP 6144:XBcNUag7Hbrp2TgO6Au07C5jHK7u9rhllr5FXCnFk:XWCag7Hnp2sR0O5jHW8hP3SC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27181

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState InterlockedDecrement GetCurrentProcess InterlockedCompareExchange CreateHardLinkA GetModuleHandleW CreateNamedPipeW EnumCalendarInfoExW GetNumberFormatA TlsSetValue LoadLibraryW GetLocaleInfoW GetCalendarInfoA CreateEventA SetVolumeMountPointA GetFileAttributesA GetTimeFormatW GetModuleFileNameW CreateActCtxA FindNextVolumeMountPointW GetTempPathW GetShortPathNameA CreateJobObjectA VerifyVersionInfoW InterlockedExchange GlobalUnfix GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW GetProcAddress GetLongPathNameA PeekConsoleInputW EnumSystemCodePagesW GetConsoleDisplayMode InterlockedIncrement LoadModule GetProcessVersion SetThreadPriorityBoost LoadLibraryA InterlockedExchangeAdd CreateFileMappingA LocalAlloc GetFileType FoldStringW SetEnvironmentVariableA EnumDateFormatsA GetProcessShutdownParameters LoadLibraryExA GetFileTime WaitForDebugEvent OpenEventW SetFileShortNameA GetVersionExA GetDiskFreeSpaceExW GetWindowsDirectoryW LocalFree LCMapStringW CommConfigDialogW CloseHandle GetStringTypeW MultiByteToWideChar CreateFileW WriteConsoleW RaiseException GetConsoleAliasExesLengthA SetEndOfFile GetConsoleAliasExesA EnumCalendarInfoA GlobalMemoryStatus SetComputerNameA SetDefaultCommConfigA HeapSize FlushFileBuffers SetStdHandle IsValidCodePage HeapAlloc HeapReAlloc ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess WriteFile HeapCreate HeapFree SetFilePointer TlsAlloc TlsGetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP

user32

SetCaretPos GetMenuStringA LoadMenuA InsertMenuItemW GetMenu DrawStateA GetWindowLongW GetSysColor CharUpperA

gdi32

GetBkMode GetCharWidthFloatA CreateDCA GetCharWidth32W GetTextCharset GetCharWidthI

winhttp

WinHttpConnect

msimg32

GradientFill