2[.]exe | Triage™

General

Target
2.exe
Size 129KB
Sample260910-ycjthavemg
SHA256 7fd4d923b29136fc2537e156f78f0bcf4371c95b1cb1267a08780811c40aa8ec
MD5 80b7fc9677ea7ebcedf12aec0fea61cf
SHA1 715f2a8b0cf927aceec019788321c69b03ce5d86
SHA512 4dba69353cb0bf2e5f8d26098bbcb745fa859bc1b98e5960b9af1e0dbb796d533ce5b8cd76f4be51eb24d65f462ad8aae5d8a0481816a61a9e0eca1bdc0b5d34
SSDEEP 3072:Pi5QPxPkSfD731oTcTS669+A2rF5gMQZOXN4:PCQPxc4xHTS6dAmkq
TLSH
T1D1D36B4B73E530F8E1768278C4921A06E776B8350B65CBAF0760476A1F272D16D3EFA1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2.exe

File Explorer

2.exe

.exe 129KB

2.exe

IMPHASH e6fc0c4ad0abeac68d4b9e9707122f34
SHA256 7fd4d923b29136fc2537e156f78f0bcf4371c95b1cb1267a08780811c40aa8ec
MD5 80b7fc9677ea7ebcedf12aec0fea61cf
SHA1 715f2a8b0cf927aceec019788321c69b03ce5d86
SHA512 4dba69353cb0bf2e5f8d26098bbcb745fa859bc1b98e5960b9af1e0dbb796d533ce5b8cd76f4be51eb24d65f462ad8aae5d8a0481816a61a9e0eca1bdc0b5d34
SSDEEP 3072:Pi5QPxPkSfD731oTcTS669+A2rF5gMQZOXN4:PCQPxc4xHTS6dAmkq
TLSH
T1D1D36B4B73E530F8E1768278C4921A06E776B8350B65CBAF0760476A1F272D16D3EFA1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

24020

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

EmptyClipboard GetClipboardData SetClipboardData GetClipboardSequenceNumber CloseClipboard OpenClipboard

kernel32

FreeLibrary WriteConsoleW CreateFileW SetFilePointerEx CloseHandle GetLastError CreateMutexA Sleep GlobalAlloc GlobalUnlock GlobalLock MultiByteToWideChar WideCharToMultiByte RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetConsoleMode RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetFileType SetStdHandle GetStringTypeW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP

Sharing