file[.]exe | Triage™

General

Target
file.exe
Size 9.6MB
Sample260805-nwct7aeq5t
SHA256 7f936ffc40d08c305fb98485fcda7ed3d5dbe601d59b9a1a0e6e8ce36e54ebe9
MD5 3b3982a4f8e3471c611c28b432c97291
SHA1 5925d0b9b00d30321ca48d4fbb7033143df16a0b
SHA512 2a30fd830068667fdb1b5d63537368250d586fdc4c1fed622808ef1937bfb8bb3ea9263b2ecd12a233d67e512418c6c4418e0f61ffa96bc97af8cbc4c068e46f
SSDEEP 196608:ZEB+eRCVUvGuzlLx9XjRueVuq/augp1/65ma2k7JRjMWpU+pLJXV:ZEB+uCOvXLjRaMaugpJ63xrYWpU+pV
TLSH
T1E2A63366B0AF0ADEC040F23DAD7294127157044494B30399AEBFC35D74E6336FAAF669
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 9.6MB

file.exe

SHA256 7f936ffc40d08c305fb98485fcda7ed3d5dbe601d59b9a1a0e6e8ce36e54ebe9
MD5 3b3982a4f8e3471c611c28b432c97291
SHA1 5925d0b9b00d30321ca48d4fbb7033143df16a0b
SHA512 2a30fd830068667fdb1b5d63537368250d586fdc4c1fed622808ef1937bfb8bb3ea9263b2ecd12a233d67e512418c6c4418e0f61ffa96bc97af8cbc4c068e46f
SSDEEP 196608:ZEB+eRCVUvGuzlLx9XjRueVuq/augp1/65ma2k7JRjMWpU+pLJXV:ZEB+uCOvXLjRaMaugpJ63xrYWpU+pV
TLSH
T1E2A63366B0AF0ADEC040F23DAD7294127157044494B30399AEBFC35D74E6336FAAF669
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

50078576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

i�iB��k��n��P�%!��2i��6)��^��>��;�h�U�'�_�&'b��p��.S�.c��Ux|ȞMJ��q�%��ވM�m3��,��5!�d�� ø�E��9)�&��]��ڽ]b�R�₻8��,n%Iim2o��N^#��p0�(��5'�όRc�p+=��/l� �ںy��8��(�@iB��1��]��>�b�u^},�i��[R�E�,��mܗt�/��f��q��#��"��b[v��E��>v˾��OR[ͮ��Zg�EB8+��[ ,|��x�m��vq��(ۃ}�D��T�ƻ�Ѳ��ьk��:��c��3�2�oC��F��+��Ϗ�ƃ�.��i��9*�u�!b0��/��-��#3 (�,��Hr�ʯOvQFZ��;J^`�|��d��y� ��Q Ҟ��|��N�>�/�Y�!��]_ؐ��J�=�/��i[�.��z��D��OM�`�W��E��/(��)�v��8�<_��Ҡ��Q6��# ��a�"�.~�Y�{��8��DXx��+<{񀍎��3pP�7��zI�3��U9s�� +Z��F�t��C�=��r��A�jjQRQ��C�� +.z�h*+��q��g�Ї��4^�t��od !�� ,`�lG:��C�k�F|��h�pb�[��j��yKLʣ��Eq��B�"�9E�}��~|�8'D�;W�/�p�C�5�̀��%�֬�m@?�5�a�!�)uА��̢D��r��lDr��ãqL�rp�?��%�LF2ou{�7)8�N-�i��j*��t��Ǜ.I>� A��$~C��*�Ʊ�6�� d�S�N:|��y�k"�Q�M��҃��=�^�inhR��$o a��qB?q��ذ��L��M��ߓ��R��:R7��i!�m~�V�¼{c��f�J��C_��J�S^�;�&7�L��+��H��a��u�J��rr�'hCI��'�E?ӊ�l��a&�ꐮWwdQD��#�خPz�/=8v��M�R�r�ٍ�^=�}Y��n)��Kw��dw详�'3��+�B��0/r"i��pؽy�;oѩ,��9X A�0t8K,�(�+sF]*�f{�rI��}O=�:]��j3)��%�H"��N��z��7�d�+��:��Cv9P��&��^��\}��!%��=��W.��rA�a��O�毕A9��|�]��o �KXL��b�p��.?��?�FomPw����]��Dzi�E�2�#��G�I��_6z��e�#^�H��W�)B�ۛ��/A\��͎�6��:�� X7�k��i��SB C:��(|��=�|7��F��K��H��`�x��}�e�)��C>�X�Yȶ�<� ��"G�F��j%S%)�ѩ��$U�Y�Ff��}߈�Y�"\�-�B �k�D}t�K�>�}��|?�צ�a�`ꙙ��L��<��Ł3OZG�e�{�s6|��1��)�3�s�p�@�cu8�s"1�\��:r�d��(<��WG�|ݟ�w�8E�h�wuHA�w��Ø��lA�)�,H�� h|��'��Z ��/n(z6�X��a�p�]�\A�}��tB0鰞�C�24_��}>l�x^!��\��6>��(��+�ᄜQ� ��!��-��u��|��Y#�.:Y'Bc��I�a�[�h�ڃW�b��3�/j׋��c�B��y��X��ь�\|qm \1=c{K� �-�b��HWy�d]��Й\�Y϶%�D0g��E5�H��Q��vF��#��l""��`�<裖��'��Ә'!�&�>��w�2pj��I��"�rb}�v� %hOj>-ϒ�c �@�pl��kG��i��ѢjuoóS�ޞ��8%��$��.� x�[��L�L��|��$�1�XÁBֹ#��^ ��u$E��D];a;$WX�@>BC `QmVv7#+�:�?̀��(Y�K�}�k��&C�� Uv\�T�Q�-�X��y@s��M��:�N��z�s�{u�v�O��3�d.�\0ښ2%Y��9|bן^��q�;ȏvŔn�W�k�H��ipp�U�b�R��$��`l�ŭ�H�3u��Kga�b7�閵�Q�<gP��Q��SG��ԂB��A�i��ʅ��N��H��X�Јrb�ڭZ�q�Ɵ��z��E��QVOE�`l9�K�Ě��vJ�s�A ѧ�q��5��{(m��N�[��+�I�S��k�c�Z1ޔϽ��e�}~��Ț��FK�/�p��3��zi�O�Za��݀��sq(��)�*'��Q�jn��>8g�6|�)��/�'�6��2��*�n��z��%nP&4-t#��脨��x*"��M�{btZ�J��}��D��)g+/��r��H��E�9��B��@��n1�;H̕��R3S8��oR�=�'��C��e�aaS: ��)�)G�+]2 �N�7�X�{�<�� j �5oK�^7�J>1�t�β*��՛Yzw�©��;��#��F,�.o��X��G�Ït?� \^��U�ߣsǫ_耋��9Iɭ�q�[Hh�9`,�b�o.��j!m�v�E�՝Q.1w!��H�T��N�� F`7n�q�%��izJ��X��!�j�(}�!l_L`It��Q��-��8�q㸑�a�=/g%��[zq`�sN�L�m�4�2�I��M��K��Ү��坰��T��g ��!�:A��<��oj\�?��d�:1�)�x��K�)Gp�K�r�%{�yYe>��̣��(G*��97��|��v��rcZ��l(��RI,�;�;�"��;X;�־�Kr ��I~hU��T��x�~�N�4�1�c�7$� x(&;C��Q�Rv�&|�߻�ޖRe�w`V��vU�>��W�'��ӃL޳�

Sharing

General

Malware Config

Signatures

File Explorer

file.exe

generic