file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 364KB
Sample240925-2cg7fs1dpr
SHA256 bbb601585160f44bd57b24288db241b31c5fc9a150acc094f6fd3bc74df8fc71
MD5 d463d4031e57b142641f41b36331da64
SHA1 cdb7db65a90a50c43aeaf837e8b87f3026e2a3d5
SHA512 b3002ee00b0f9f05c844615106b9dffeb91592ee82c2ae2a973f41cf11190959a91e30c16be0f3d8f050887d58fd1fca31c70e28f496ca528314ffd8746b21ae
SSDEEP 6144:mp2uxd6FuA7PmxcMi5wGj6RnCpaCCdw9E2/Eu6WZ:mp2uxRA7PWc5YCpaCCO9zE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 364KB

file.exe

IMPHASH ea08ad0474ce7c4a6cc2ac1bffc2f1ab
SHA256 bbb601585160f44bd57b24288db241b31c5fc9a150acc094f6fd3bc74df8fc71
MD5 d463d4031e57b142641f41b36331da64
SHA1 cdb7db65a90a50c43aeaf837e8b87f3026e2a3d5
SHA512 b3002ee00b0f9f05c844615106b9dffeb91592ee82c2ae2a973f41cf11190959a91e30c16be0f3d8f050887d58fd1fca31c70e28f496ca528314ffd8746b21ae
SSDEEP 6144:mp2uxd6FuA7PmxcMi5wGj6RnCpaCCdw9E2/Eu6WZ:mp2uxRA7PWc5YCpaCCO9zE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

202019

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetCurrentProcess SetDefaultCommConfigW SetEnvironmentVariableW CreateJobObjectW CreateHardLinkA GetModuleHandleW GetNumberFormatA SetFileTime SetCommState LoadLibraryW ReadConsoleInputA GetCalendarInfoW SetVolumeMountPointA GetConsoleAliasExesLengthW GetVersionExW GetFileAttributesA EnumSystemCodePagesA GetTimeFormatW GetFileAttributesW CreateActCtxA GetEnvironmentVariableA SetThreadPriority GetTempPathW GetShortPathNameA VerifyVersionInfoW GlobalUnfix GetStdHandle GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW GetLongPathNameW GetProcAddress CreateNamedPipeA EnumCalendarInfoW LoadModule GlobalFree GetProcessVersion LoadLibraryA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW CreateFileMappingW CreateEventW FoldStringA GetModuleFileNameA GlobalUnWire LoadLibraryExA EnumDateFormatsW WaitForDebugEvent OpenEventW SetProcessShutdownParameters SetFileShortNameA GetDiskFreeSpaceExW GetWindowsDirectoryW EnumCalendarInfoExA LCMapStringW CreateFileW GetStringTypeW MultiByteToWideChar WriteConsoleW CloseHandle FlushFileBuffers SetStdHandle InterlockedIncrement CommConfigDialogA GetConsoleAliasExesA GetLocaleInfoA SetFilePointer TlsGetValue SetComputerNameA GetComputerNameA HeapFree EncodePointer DecodePointer HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess HeapCreate Sleep HeapSize ExitProcess HeapAlloc WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind

user32

CharLowerBuffA SetCaretPos LoadMenuA InsertMenuItemW GetWindowLongA CharUpperA GetSysColor GetMenuStringA SetMenu

gdi32

GetCharWidthI GetBkMode CreateDCW GetCharWidth32W GetPixelFormat

advapi32

RegSetValueA

winhttp

WinHttpQueryHeaders