embedded[.]exe | Triage™

General

Target
embedded.exe
Size 233KB
Sample260901-2ssccsyekf
SHA256 9ee288208b7c81c8c778a5357900cd7e87c5de1a69f95ae26a841ab1cfaa097e
MD5 d82f3d2ff0f77c32873939b6fc64097e
SHA1 95eb71ce08b5249f872fcd83d1cb23c02a79e9a4
SHA512 f033133ef17369e2c027e8ad129de30d60dc7b9361d55c0d5ccb6933a4bca521a9fba9037ddbc29cd72ba5da84c4e63a886b386f22374f6b7f933cd2ab4b6599
SSDEEP 6144:P9L/KdtZexqwAtsZJ3DS9hRuiugQKnWcXImp/B:FL/KvYYmZJsiiugOcYmp/B
TLSH
T10A344AA2FF52C67BC06339BD8A5980D56660B9242D22928B73DB1F4F9B36BC47D34305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
embedded.exe

File Explorer

embedded.exe

.exe 233KB

embedded.exe

IMPHASH 51b173753a69f9b7df49ee5ea668e30e
SHA256 9ee288208b7c81c8c778a5357900cd7e87c5de1a69f95ae26a841ab1cfaa097e
MD5 d82f3d2ff0f77c32873939b6fc64097e
SHA1 95eb71ce08b5249f872fcd83d1cb23c02a79e9a4
SHA512 f033133ef17369e2c027e8ad129de30d60dc7b9361d55c0d5ccb6933a4bca521a9fba9037ddbc29cd72ba5da84c4e63a886b386f22374f6b7f933cd2ab4b6599
SSDEEP 6144:P9L/KdtZexqwAtsZJ3DS9hRuiugQKnWcXImp/B:FL/KvYYmZJsiiugOcYmp/B
TLSH
T10A344AA2FF52C67BC06339BD8A5980D56660B9242D22928B73DB1F4F9B36BC47D34305
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetStdHandle GetConsoleMode TlsGetValue GetLastError SetLastError RaiseException ExitProcess GetStartupInfoA GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer SetEndOfFile GetSystemInfo LoadLibraryW GetProcAddress FreeLibrary FormatMessageW DeleteFileW CreateFileW GetFileAttributesW CreateDirectoryW RemoveDirectoryW GetCurrentDirectoryW GetFullPathNameW GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority GetCurrentThread OpenThread IsDebuggerPresent CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP RtlUnwind EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource GetWindowsDirectoryA CreateProcessA GetVersionExA CompareStringA GetLocaleInfoA EnumCalendarInfoA GetModuleFileNameW FindNextFileW CompareStringW GetLocaleInfoW FindFirstFileExW VirtualFree DeviceIoControl FindClose FileTimeToLocalFileTime FileTimeToDosDateTime GetCPInfo GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetSystemMetrics MessageBeep

Name

.text

Size

176KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

embedded.exe

kernel32

oleaut32

user32

generic