file[.]exe | Triage™

General

Target
file.exe
Size 1.5MB
Sample260309-awa4pshs3w
SHA256 b94921bb31f3dafcd7b786b83da8916746d1e31c6ec7c7e66ff07291cb46d080
MD5 da2775f1345e0b2b4429d704f9e16eb7
SHA1 7090c36a9d18371afbf43021463143af5f64ade6
SHA512 5b4bbdaf6c672c35e900c29bd4c8032690ae1af5546e974e6e22e3eb3e6191b9bbbe0eab65bf9eec22544ce945a38bcadd91c177e111d0dd9fe04262825b752b
SSDEEP 24576:ivGfGaFCrUEg/LqSnw1SD//cbavdJ1fPGCwv4TBfPwe0p4bPmV:iuOa64/ohoBf4e0p4bPm
TLSH
T1C6651800FDC764B6E502173659BB63AF6735AC090F329BE7EE447A7AF9772910822305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 1.5MB

file.exe

IMPHASH 1aae8bf580c846f39c71c05898e57e88
SHA256 b94921bb31f3dafcd7b786b83da8916746d1e31c6ec7c7e66ff07291cb46d080
MD5 da2775f1345e0b2b4429d704f9e16eb7
SHA1 7090c36a9d18371afbf43021463143af5f64ade6
SHA512 5b4bbdaf6c672c35e900c29bd4c8032690ae1af5546e974e6e22e3eb3e6191b9bbbe0eab65bf9eec22544ce945a38bcadd91c177e111d0dd9fe04262825b752b
SSDEEP 24576:ivGfGaFCrUEg/LqSnw1SD//cbavdJ1fPGCwv4TBfPwe0p4bPmV:iuOa64/ohoBf4e0p4bPm
TLSH
T1C6651800FDC764B6E502173659BB63AF6735AC090F329BE7EE447A7AF9772910822305
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

446656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

585KB

Virtual Size

584KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

753KB

Virtual Size

752KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

17KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

file.exe

kernel32

generic

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

file.exe

kernel32

generic