file[.]exe | Triage™

General

Target
file.exe
Size 186KB
Sample260818-acbacsscnd
SHA256 c1bbf296cafb65c2ec94c313cb043889183bc79316be9f20344fd59c7da92421
MD5 7cc11dd00e8a82bf4cc2111992078611
SHA1 2af00978bb8836190e710fbd3ab201e7bd9c08a8
SHA512 0a8d1256456d941277c63cf6ed08b0b57b2045909d9689f849d698cf135d1789f6f5ee8efcce6b3bee9321780f8041b31cfad6ae831c27a1dde5440531da9ffc
SSDEEP 3072:Q4xVsYtbORgxbXAgKwjrdy6gs4TJi7P4X2JmdU4NiTxRS/0RR/96OmySzYQkUNrs:QXYtbOix7AgK6iYbc2JfkiTxRS/u1rm4
TLSH
T12B1423445D82FD88D1FF00703C9E4275B9B92AFC9EF5A5E7350B75108CA4AD4A8E0EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 186KB

file.exe

IMPHASH c44f935d14991cc22f7845a20b7ff7f2
SHA256 c1bbf296cafb65c2ec94c313cb043889183bc79316be9f20344fd59c7da92421
MD5 7cc11dd00e8a82bf4cc2111992078611
SHA1 2af00978bb8836190e710fbd3ab201e7bd9c08a8
SHA512 0a8d1256456d941277c63cf6ed08b0b57b2045909d9689f849d698cf135d1789f6f5ee8efcce6b3bee9321780f8041b31cfad6ae831c27a1dde5440531da9ffc
SSDEEP 3072:Q4xVsYtbORgxbXAgKwjrdy6gs4TJi7P4X2JmdU4NiTxRS/0RR/96OmySzYQkUNrs:QXYtbOix7AgK6iYbc2JfkiTxRS/u1rm4
TLSH
T12B1423445D82FD88D1FF00703C9E4275B9B92AFC9EF5A5E7350B75108CA4AD4A8E0EA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Z:\gen\Dll1\Release\Dll1.pdb

file.exe

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

file.exe

kernel32

user32

generic