new[.]exe | Triage™

General

Target
new.exe
Size 577KB
Sample220603-sf2wlaaea6
SHA256 d4a1a24350b12333115cb366c5d245061d950dcc509995fd7af133da49cd9b66
MD5 3dfa7c4215b3a46dc8a0947253f55285
SHA1 5cf9f2c6d680df52a8e439823014dc66cb9ccced
SHA512 8b34e5d1bac167a09ca709a3a1328021ce975306756d74137dc2ab1e49232135117775a6435ec99662fa0060789035f358768963400aa9abc00cdbfc8529e325
SSDEEP 12288:AzaY83phjsUYuah+tb9aOM7NCNtSO46pOOKTBwob29PZfALt3:dNWUYuahEY37OtSO46pOfTeoK9PlALt3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

new.exe

.exe 577KB

new.exe

IMPHASH 9ccb8d78f748eb70afd267647e41d62d
SHA256 d4a1a24350b12333115cb366c5d245061d950dcc509995fd7af133da49cd9b66
MD5 3dfa7c4215b3a46dc8a0947253f55285
SHA1 5cf9f2c6d680df52a8e439823014dc66cb9ccced
SHA512 8b34e5d1bac167a09ca709a3a1328021ce975306756d74137dc2ab1e49232135117775a6435ec99662fa0060789035f358768963400aa9abc00cdbfc8529e325
SSDEEP 12288:AzaY83phjsUYuah+tb9aOM7NCNtSO46pOOKTBwob29PZfALt3:dNWUYuahEY37OtSO46pOfTeoK9PlALt3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31170

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCompact SetPriorityClass lstrlenA CopyFileExW GetDriveTypeW CommConfigDialogA BuildCommDCBAndTimeoutsA FreeLibrary GetCommState CreateJobObjectW GetNamedPipeHandleStateA WaitForSingleObject AddConsoleAliasW GetComputerNameW SetCommState SetProcessPriorityBoost InitializeCriticalSection ActivateActCtx GlobalAlloc LoadLibraryW _hread GetVersionExW GetBinaryTypeA IsDBCSLeadByte ReadFile lstrcatA GetOverlappedResult GetACP RaiseException SetLastError GetTapeStatus VirtualAlloc BeginUpdateResourceW CopyFileA GetConsoleDisplayMode IsSystemResumeAutomatic SetConsoleOutputCP AddAtomW PostQueuedCompletionStatus GetPrivateProfileStructA SetEnvironmentVariableA GetPrivateProfileSectionNamesA GetOEMCP EnumDateFormatsA GetThreadPriority CreateIoCompletionPort DebugBreakProcess CreateMutexA VirtualProtect GetCurrentDirectoryA LocalSize CompareStringA CreateFileA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind LCMapStringW LCMapStringA GetStringTypeW GetModuleHandleW GetProcAddress ExitProcess SetConsoleCtrlHandler WriteFile GetStdHandle GetModuleFileNameA HeapCreate HeapDestroy VirtualFree FatalAppExitA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetTimeFormatA GetDateFormatA IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetTimeZoneInformation GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CompareStringW

user32

GetAncestor

Name

.text

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

109KB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

new.exe

kernel32

user32