file[.]exe | Triage™

General

Target
file.exe
Size 6.3MB
Sample260701-d4e96sdw9l
SHA256 ec889a49ebd5ad66c0499fbc6fbc604363c825abdcb216978d430a40f5fbead0
MD5 f23a46170f50a0a300ee75f32dcb48f8
SHA1 909881eeb554e63f5c01009682a66b86e2bccac1
SHA512 21199952894c45053a5c97b847fe91cd0a4ecca8419119b4bca66cd6857f8d703e5a8bdd8469fe2d42e1ad630e739a957b7599d97917c675d23e188bec28b965
SSDEEP 49152:OA2/PRUj4FOEQSOaYXXpDYALLRENU9Qd+buk1eHxjCJdJdUNAuqeVIpLdcQeBQAc:3eikYJAYXWU9w6ZcHEffv
TLSH
T163665AC367F91732E6AE0F79ACBC45110A71BD06BE2DE60E1945B4AB8977340B903367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 6.3MB

file.exe

SHA256 ec889a49ebd5ad66c0499fbc6fbc604363c825abdcb216978d430a40f5fbead0
MD5 f23a46170f50a0a300ee75f32dcb48f8
SHA1 909881eeb554e63f5c01009682a66b86e2bccac1
SHA512 21199952894c45053a5c97b847fe91cd0a4ecca8419119b4bca66cd6857f8d703e5a8bdd8469fe2d42e1ad630e739a957b7599d97917c675d23e188bec28b965
SSDEEP 49152:OA2/PRUj4FOEQSOaYXXpDYALLRENU9Qd+buk1eHxjCJdJdUNAuqeVIpLdcQeBQAc:3eikYJAYXWU9w6ZcHEffv
TLSH
T163665AC367F91732E6AE0F79ACBC45110A71BD06BE2DE60E1945B4AB8977340B903367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ActionIntercept AesAnimate AreaSlider BackoffFramebuffer CatalogConfig ChannelShow CheckBoxShaderSpacing ClickEvent ClientPause Collapse CompleterPayload ComponentHandler CookieDisconnectGrid CropEndUniform CutPixel DecompressGesture DescriptorConsumer DiffMask Disable DragApplySampler DragSaveFrame EmitterPlayPreset EndModel EventMarginBackoff ExtensionBegin FactoryModelPayload FileResizeAction FragmentSlide GameOptions GeometryLoginSector GlyphClick HashPresetMdiArea IniFileWorldScale LevelCsvRegister ListViewMorphSign LoaderSectorGroupBox Logout LoopZoneShow MergeEndRadioButton MixerMathSkeleton MorphSend OptionsIndexRole PackBlurPause ParserExtensionInit PatchJob PayloadManifestEncode PixelShortcut PlainTextWrapper ProfileMap ProfilerHandlerSettings ProgressBarFlow ProgressBarManager PropertyRefresh QuatWizardActor RadioButtonComboBoxBuffer RegionConsumer RegionUninstall RegisterMergePlugin RegisterRoom Reload ReloadPressRadioButton RepeatSignIconView Replace RestoreDial ReverseSequential RewindPrevChunk Rotate SampleDisable Save ScrollJson SectorReplace SequentialPush SequentialResolver ShiftUnlockChannel Signal SpinBoxDisconnect StackedWidgetProvider StatusBarZone StreamRemoveAt StreamRewind StreamSceneSource StyleTooltipSpinBox SubdividePressPipe ThemeTranslationRepeat TimerManifest TimerTranscode ToolbarQuote TouchEventChunkInsert TouchEventThemePixel TransitionEncrypt TransitionSelectionProgressBar TransitionSocketShow TransitionTranslate UninstallClickTabWidget Unload UnpackListener VectorPushLoader ViewVerifyCheckBox VolumePreset WatcherWork WidgetResolver WidgetSignalZone

Sharing

General

Malware Config

Signatures

File Explorer

file.exe

generic