MalSample[.]exe | Triage™

General

Target
MalSample.exe
Size 1.0MB
Sample260713-pp1hcabs2x
SHA256 22da9e7570891bd2371713a04cfcf8490a2237bbdc587e267c8404dee1db5239
MD5 4c91cada20727f3337e829efef6f137a
SHA1 b1b57a22e71e55a5a97e6c171cc094d0dd000ff4
SHA512 cf5226eec6ba44b65929cd5d6d02c4ab53cda8b87bff16cff11a5444d7216c4dabd3a7db06fa6640bceb14c2a7a48ed757d50dcd602ccf46a4472411f03ee051
SSDEEP 24576:0zLZ0TK6Oh9AZDtVwiwg+Nme0u6UgvOip9AXK+8VvV4KOw/oIa:0zLuTKpARtW4ame6ZOG9h+8VCKOFD
TLSH
T1F435233470F3D215CD0BF63985A52F27CB83F876189A531E74108A8CC7E7D4AD6A872A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalSample.exe

File Explorer

MalSample.exe

.exe 1.0MB

MalSample.exe

IMPHASH 150594cad7f06a86164a278a4593423a
SHA256 22da9e7570891bd2371713a04cfcf8490a2237bbdc587e267c8404dee1db5239
MD5 4c91cada20727f3337e829efef6f137a
SHA1 b1b57a22e71e55a5a97e6c171cc094d0dd000ff4
SHA512 cf5226eec6ba44b65929cd5d6d02c4ab53cda8b87bff16cff11a5444d7216c4dabd3a7db06fa6640bceb14c2a7a48ed757d50dcd602ccf46a4472411f03ee051
SSDEEP 24576:0zLZ0TK6Oh9AZDtVwiwg+Nme0u6UgvOip9AXK+8VvV4KOw/oIa:0zLuTKpARtW4ame6ZOG9h+8VCKOFD
TLSH
T1F435233470F3D215CD0BF63985A52F27CB83F876189A531E74108A8CC7E7D4AD6A872A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

aa123

Minor OS version

0

Major OS version

6

Entry point

9852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

RtlLookupFunctionEntry CreateProcessA GetNativeSystemInfo CloseHandle RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetModuleHandleW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter RtlCaptureContext

advapi32

RegCloseKey

vcruntime140

__C_specific_handler wcsstr __current_exception __current_exception_context memset memcpy

api-ms-win-crt-string-l1-1-0

_wcsicmp strncpy

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _crt_atexit _c_exit _seh_filter_exe _cexit _set_app_type __p___argc __p___argv _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv terminate _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing