online[.]exe | Triage™

General

Target
online.exe
Size 273KB
Sample220308-vfv46accdk
SHA256 a9f87386c6659067bcc5f4d57b330eec49d47e94906cdf5fadee13eeda9289a1
MD5 f3b48a59e577de34106057e3305e38ef
SHA1 4a686f773fb38a61a51c4b8e10985d0bde1743ae
SHA512 f8dce2830e9a5cdd6eec2f5f3e7312f9eaf86a3f0032fdeb8a205ec18506a5ae6a85796ffaf9d503231a52009797390321918bc3bb463381e783b323704784a7
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

online.exe

.exe 273KB

online.exe

IMPHASH 5fb8a90699385dd79bbcc37048719eae
SHA256 a9f87386c6659067bcc5f4d57b330eec49d47e94906cdf5fadee13eeda9289a1
MD5 f3b48a59e577de34106057e3305e38ef
SHA1 4a686f773fb38a61a51c4b8e10985d0bde1743ae
SHA512 f8dce2830e9a5cdd6eec2f5f3e7312f9eaf86a3f0032fdeb8a205ec18506a5ae6a85796ffaf9d503231a52009797390321918bc3bb463381e783b323704784a7
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

20836

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddConsoleAliasW FreeEnvironmentStringsA GlobalAlloc WideCharToMultiByte SetVolumeMountPointA LeaveCriticalSection HeapValidate GetAtomNameW ReplaceFileA SetLastError AttachConsole VirtualAlloc BeginUpdateResourceW ZombifyActCtx SetStdHandle LoadLibraryA WriteConsoleA SetCalendarInfoW AddVectoredExceptionHandler GetModuleFileNameA SetConsoleTitleW FindFirstChangeNotificationA EnumResourceNamesA GetConsoleTitleW GetVersionExA LocalFree WriteProfileSectionA GetDefaultCommConfigW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetStartupInfoW RaiseException RtlUnwind GetModuleHandleW Sleep GetProcAddress ExitProcess GetLastError WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar FlushFileBuffers HeapSize GetLocaleInfoA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

Sharing