sgcom6[.]exe | Triage™

General

Target
sgcom6.exe
Size 261KB
Sample260929-wt2drsvx4q
SHA256 d7ba14ef0fb2a6c88e88eea0b28e12abd79776bc747ed1f570aa649505fef1df
MD5 203ac8485c9733e0d628f35bc1f96f79
SHA1 2e08f9f93caa42e78d4bb194bfac67f03e460f9b
SHA512 a6c27fcb50343a8e1a1dc41c09750b8e0bb7603146692e9e3269265b6bcd439f817d932d0b59a8df40b13c0ca9dedaae74093e321ea94e6fc390934afb3a7815
SSDEEP 6144:hobhT5HN+BpbzjK5bx/KRwh74FvBcUZ5J:DWvyRcw+O5J
TLSH
T1DF448D11F2E38071CA9302B60DE9E735957E7A1647B0DEE3B3840B6DDD711C29B3A689
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sgcom6.exe

File Explorer

sgcom6.exe

.exe 261KB

sgcom6.exe

IMPHASH f08d1d2ef4271baf72e3417c92e91f50
SHA256 d7ba14ef0fb2a6c88e88eea0b28e12abd79776bc747ed1f570aa649505fef1df
MD5 203ac8485c9733e0d628f35bc1f96f79
SHA1 2e08f9f93caa42e78d4bb194bfac67f03e460f9b
SHA512 a6c27fcb50343a8e1a1dc41c09750b8e0bb7603146692e9e3269265b6bcd439f817d932d0b59a8df40b13c0ca9dedaae74093e321ea94e6fc390934afb3a7815
SSDEEP 6144:hobhT5HN+BpbzjK5bx/KRwh74FvBcUZ5J:DWvyRcw+O5J
TLSH
T1DF448D11F2E38071CA9302B60DE9E735957E7A1647B0DEE3B3840B6DDD711C29B3A689
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

111329

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

secur32

GetUserNameExA

kernel32

GetSystemDirectoryA GetLastError GetVolumeInformationA GetFileType IsDebuggerPresent EncodePointer DecodePointer IsProcessorFeaturePresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GetDriveTypeW GetFullPathNameA InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar GetCommandLineA RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcessHeap HeapSize Sleep GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcessId CloseHandle DeleteCriticalSection InterlockedIncrement GetCurrentThreadId FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode IsValidCodePage GetACP GetOEMCP GetCPInfo ReadFile ReadConsoleW GetCurrentDirectoryW LoadLibraryExW FileTimeToLocalFileTime FindClose FindFirstFileExW FileTimeToSystemTime GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc OutputDebugStringW LoadLibraryW CompareStringW LCMapStringW SetFilePointerEx SetStdHandle CreateFileW WriteConsoleW GetStringTypeW GetFileInformationByHandle PeekNamedPipe GetFullPathNameW SetEndOfFile SetEnvironmentVariableA GetTimeZoneInformation

iphlpapi

GetAdaptersInfo

Sharing