file[.]exe | Triage™

General

Target
file.exe
Size 1.1MB
Sample260815-ppv8maxsgv
SHA256 813e1dd6f327354fdf8077fc9482fcfff32c357ed876da3cd197a16f596f0692
MD5 511733f92427fb512d1f2747e760bad7
SHA1 d565760037dfcd91f49229841c6f0d1e39497c4e
SHA512 3de1565e6d39030f24deda1f676ef6664e2fd975fddd9fd81dd4b69719bbea6325cc5d6001945768faf3902ae4fff6c663c84e019ebe71f349ac433470d619c0
SSDEEP 24576:SDvoYnIG88/fNpvPlr65WcJYfYi+St0ZQFe:SLo8IG9zPQ59JYfVt0ZQ
TLSH
T103351225B792C0F8E21EC074C255462AAA3278864B3159FF02B54E792F2B7E65F3DF11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 1.1MB

file.exe

IMPHASH c1694fa65646847c8fb0849882fd837b
SHA256 813e1dd6f327354fdf8077fc9482fcfff32c357ed876da3cd197a16f596f0692
MD5 511733f92427fb512d1f2747e760bad7
SHA1 d565760037dfcd91f49229841c6f0d1e39497c4e
SHA512 3de1565e6d39030f24deda1f676ef6664e2fd975fddd9fd81dd4b69719bbea6325cc5d6001945768faf3902ae4fff6c663c84e019ebe71f349ac433470d619c0
SSDEEP 24576:SDvoYnIG88/fNpvPlr65WcJYfYi+St0ZQFe:SLo8IG9zPQ59JYfVt0ZQ
TLSH
T103351225B792C0F8E21EC074C255462AAA3278864B3159FF02B54E792F2B7E65F3DF11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

98140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

perftrack.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

kernel32

InitializeSListHead CreateFileW GetTickCount GetCurrentProcessId CloseHandle VirtualAlloc VirtualProtect VirtualFree GetTickCount64 GetModuleHandleA GetProcAddress GetProcessHeap HeapFree HeapReAlloc lstrlenW GetCurrentProcess WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GetModuleHandleW FormatMessageW GetLastError AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCurrentThreadId ExitProcess QueryPerformanceFrequency HeapAlloc MultiByteToWideChar WriteConsoleW GetStdHandle GetConsoleMode GetConsoleOutputCP WaitForSingleObject CreateWaitableTimerExW SetWaitableTimer Sleep CreateThread QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFilePointerEx FlushFileBuffers HeapSize LCMapStringW CompareStringW GetSystemTimeAsFileTime IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlPcToFileHeader WriteFile GetModuleFileNameW TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW

user32

GetWindowRect GetDesktopWindow

ntdll

RtlNtStatusToDosError NtWriteFile

Sharing