file[.]exe | Triage™

General

Target
file.exe
Size 334KB
Sample240924-tx31nashkn
SHA256 08dc5b0fb0c2646f546f0af389c3c9934995f1cf6819a05c171db3eca242554d
MD5 bdf38f58675cd77401c679df69c4a3e8
SHA1 298dac0330058235adec1bd5dd80c59f99c688af
SHA512 fa056f5784c76252db3edff2f0ba060b2ac42fbb2c73fedaa076ba735b2f19c14b7feff69f6794f0108c98fe91764e4d45110459e87df68a072a78f212a363c1
SSDEEP 6144:aLBLLLswh/uDmd4hjDjjeFUm7wsiRBQIFYc5gujYW:aLB/LUDI4DX9m7w/1YW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 334KB

file.exe

IMPHASH f191e24764ac2972e2c40e13c71b6d0d
SHA256 08dc5b0fb0c2646f546f0af389c3c9934995f1cf6819a05c171db3eca242554d
MD5 bdf38f58675cd77401c679df69c4a3e8
SHA1 298dac0330058235adec1bd5dd80c59f99c688af
SHA512 fa056f5784c76252db3edff2f0ba060b2ac42fbb2c73fedaa076ba735b2f19c14b7feff69f6794f0108c98fe91764e4d45110459e87df68a072a78f212a363c1
SSDEEP 6144:aLBLLLswh/uDmd4hjDjjeFUm7wsiRBQIFYc5gujYW:aLB/LUDI4DX9m7w/1YW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetConsoleAliasExesLengthA OpenJobObjectA QueryDosDeviceA GetComputerNameW SleepEx FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA ReadConsoleOutputA GetPriorityClass GetEnvironmentStrings FatalAppExitW SetSystemTimeAdjustment HeapCreate SetConsoleMode GetFileAttributesW GetModuleFileNameW GetBinaryTypeW SetConsoleTitleA GetShortPathNameA GetStdHandle GetLastError GetProcAddress SearchPathA GetCommandLineW OpenWaitableTimerA LoadLibraryA InterlockedExchangeAdd LocalAlloc MoveFileA SetCommMask FindAtomA FoldStringA WaitForMultipleObjects CreatePipe GetDefaultCommConfigA GetModuleHandleA FreeEnvironmentStringsW BuildCommDCBA PurgeComm WaitForDebugEvent SetCalendarInfoA GlobalReAlloc CopyFileExA GetVolumeInformationW CreateFileA GetNumaHighestNodeNumber DebugActiveProcess HeapFree Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar ReadFile GetLocaleInfoA WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetUserObjectInformationW SetFocus

advapi32

ObjectPrivilegeAuditAlarmA

Sharing