i[.]exe | Triage™

General

Target
i.exe
Size 247KB
Sample260821-ckk6mseq6s
SHA256 155acb38a18a0347a988ed325b974bc462b71aa3c224da8f21d4b13df1541160
MD5 7d69215f91d19bd740494eb83625e0d0
SHA1 15d7b9e5c0ddbed26197583c57162c433b560377
SHA512 8666c3eab25a2b2389107f1ced7f555dcdb44b6c6dc4ae41ec39eb1816765988bcb4484a26ae877611d15314c9dcf9df9f17543354d0579d6307903f5ef99735
SSDEEP 3072:M/cTEcBY/qIS2kgcFOJWiW7LeupDZYsME4YqpZfpwVWoutFkZEt71WT:M/jSKJdWPxpMpYqpXwCkZGC
TLSH
T1A3347D571CA3883DE1A16EB4792172F44DDA70132626AA8E3FD1257D0E19EE082DDFC7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
i.exe

File Explorer

i.exe

.exe 247KB

i.exe

IMPHASH 27c58f142ee4aa530f190be18d0e5927
SHA256 155acb38a18a0347a988ed325b974bc462b71aa3c224da8f21d4b13df1541160
MD5 7d69215f91d19bd740494eb83625e0d0
SHA1 15d7b9e5c0ddbed26197583c57162c433b560377
SHA512 8666c3eab25a2b2389107f1ced7f555dcdb44b6c6dc4ae41ec39eb1816765988bcb4484a26ae877611d15314c9dcf9df9f17543354d0579d6307903f5ef99735
SSDEEP 3072:M/cTEcBY/qIS2kgcFOJWiW7LeupDZYsME4YqpZfpwVWoutFkZEt71WT:M/jSKJdWPxpMpYqpXwCkZGC
TLSH
T1A3347D571CA3883DE1A16EB4792172F44DDA70132626AA8E3FD1257D0E19EE082DDFC7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10853

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask lstrlenA GetProcessIoCounters GetTickCount GetSystemWow64DirectoryW GetProcessHandleCount TerminateProcess GetProcAddress GetModuleHandleA GetCurrentProcessId GetFileInformationByHandle EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc IsValidCodePage GetOEMCP GetACP GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException IsProcessorFeaturePresent HeapAlloc GetLastError HeapFree EncodePointer DecodePointer SetUnhandledExceptionFilter GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess LeaveCriticalSection FatalAppExitA EnterCriticalSection RtlUnwind Sleep HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryW GetLocaleInfoW GetCPInfo IsValidLocale

user32

SetPropW ShowScrollBar LoadImageA LoadImageW

shell32

SHGetDiskFreeSpaceExW ord179

msimg32

TransparentBlt

Sharing