file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 446KB
Sample240922-js9brsyglp
SHA256 338e2378b54f3a94828bc23452f0b6e7bd7f69bc2fb13c618e727feafe61d1ee
MD5 23b504ebcc23b1216f95bf578289d648
SHA1 01bdab9d9d491672974198075388cad941372e38
SHA512 3441ae4b1e119143fcc433ef53731150eb05a5ac6190c9b13a96386f76ad030cbe83a804abe3bc5f825d6841a98dae71646688599f5cf05dbe0b669a52f7944c
SSDEEP 6144:3Ba9JaOIl9S0CkEjkXuARDWoQpLz1LiHTlXb55FXCnFk:3cXaO+SteXuGVQ9z1LiHBrpSC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 446KB

file.exe

IMPHASH 2f3fb52e2448b38ca202de4ef9ca1d86
SHA256 338e2378b54f3a94828bc23452f0b6e7bd7f69bc2fb13c618e727feafe61d1ee
MD5 23b504ebcc23b1216f95bf578289d648
SHA1 01bdab9d9d491672974198075388cad941372e38
SHA512 3441ae4b1e119143fcc433ef53731150eb05a5ac6190c9b13a96386f76ad030cbe83a804abe3bc5f825d6841a98dae71646688599f5cf05dbe0b669a52f7944c
SSDEEP 6144:3Ba9JaOIl9S0CkEjkXuARDWoQpLz1LiHTlXb55FXCnFk:3cXaO+SteXuGVQ9z1LiHBrpSC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27181

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState InterlockedDecrement GetCurrentProcess InterlockedCompareExchange CreateHardLinkA GetModuleHandleW CreateNamedPipeW EnumCalendarInfoExW GetNumberFormatA TlsSetValue LoadLibraryW GetLocaleInfoW GetCalendarInfoA CreateEventA SetVolumeMountPointA GetFileAttributesA GetTimeFormatW GetModuleFileNameW CreateActCtxA FindNextVolumeMountPointW GetTempPathW GetShortPathNameA CreateJobObjectA VerifyVersionInfoW InterlockedExchange GlobalUnfix GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW GetProcAddress GetLongPathNameA PeekConsoleInputW EnumSystemCodePagesW GetConsoleDisplayMode InterlockedIncrement LoadModule GetProcessVersion SetThreadPriorityBoost LoadLibraryA InterlockedExchangeAdd CreateFileMappingA LocalAlloc GetFileType FoldStringW SetEnvironmentVariableA EnumDateFormatsA GetProcessShutdownParameters LoadLibraryExA GetFileTime WaitForDebugEvent OpenEventW SetFileShortNameA GetVersionExA GetDiskFreeSpaceExW GetWindowsDirectoryW LocalFree LCMapStringW CommConfigDialogW CloseHandle GetStringTypeW MultiByteToWideChar CreateFileW WriteConsoleW RaiseException GetConsoleAliasExesLengthA SetEndOfFile GetConsoleAliasExesA EnumCalendarInfoA GlobalMemoryStatus SetComputerNameA SetDefaultCommConfigA HeapSize FlushFileBuffers SetStdHandle IsValidCodePage HeapAlloc HeapReAlloc ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess WriteFile HeapCreate HeapFree SetFilePointer TlsAlloc TlsGetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP

user32

SetCaretPos GetMenuStringA LoadMenuA InsertMenuItemW GetMenu DrawStateA GetWindowLongW GetSysColor CharUpperA

gdi32

GetBkMode GetCharWidthFloatA CreateDCA GetCharWidth32W GetTextCharset GetCharWidthI

winhttp

WinHttpConnect

msimg32

GradientFill