new[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
new.exe
Size 749KB
Sample220628-cst4hsefaq
SHA256 0b9666aa27ef229d6c52ff5243bca7e0adbfd0c086a0f919ea1edcdcd06b95cb
MD5 57e584e029832148a60af9bad5fb87ea
SHA1 58e680b15d034dfb98352dc03e5060be1fbb62b4
SHA512 a6b4b6170d4a5e7e8924026add27fc2d19292601d250b1141ee85008e35a28b155e547cbdb39217285f9dcf6053fd1e8b2388237c84332dcb1ae4e7234937832
SSDEEP 12288:pzaY83phjsUY9M/xztb9aOM7NCNBK835ZzdLHOVWeTf4sT6AO8nRcoul12kIyO:oNWUY9M/x5Y37OBK8pZ0WeksSqRcpsqO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

new.exe

.exe 749KB

new.exe

IMPHASH 9ccb8d78f748eb70afd267647e41d62d
SHA256 0b9666aa27ef229d6c52ff5243bca7e0adbfd0c086a0f919ea1edcdcd06b95cb
MD5 57e584e029832148a60af9bad5fb87ea
SHA1 58e680b15d034dfb98352dc03e5060be1fbb62b4
SHA512 a6b4b6170d4a5e7e8924026add27fc2d19292601d250b1141ee85008e35a28b155e547cbdb39217285f9dcf6053fd1e8b2388237c84332dcb1ae4e7234937832
SSDEEP 12288:pzaY83phjsUY9M/xztb9aOM7NCNBK835ZzdLHOVWeTf4sT6AO8nRcoul12kIyO:oNWUY9M/x5Y37OBK8pZ0WeksSqRcpsqO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31170

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCompact SetPriorityClass lstrlenA CopyFileExW GetDriveTypeW CommConfigDialogA BuildCommDCBAndTimeoutsA FreeLibrary GetCommState CreateJobObjectW GetNamedPipeHandleStateA WaitForSingleObject AddConsoleAliasW GetComputerNameW SetCommState SetProcessPriorityBoost InitializeCriticalSection ActivateActCtx GlobalAlloc LoadLibraryW _hread GetVersionExW GetBinaryTypeA IsDBCSLeadByte ReadFile lstrcatA GetOverlappedResult GetACP RaiseException SetLastError GetTapeStatus VirtualAlloc BeginUpdateResourceW CopyFileA GetConsoleDisplayMode IsSystemResumeAutomatic SetConsoleOutputCP AddAtomW PostQueuedCompletionStatus GetPrivateProfileStructA SetEnvironmentVariableA GetPrivateProfileSectionNamesA GetOEMCP EnumDateFormatsA GetThreadPriority CreateIoCompletionPort DebugBreakProcess CreateMutexA VirtualProtect GetCurrentDirectoryA LocalSize CompareStringA CreateFileA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind LCMapStringW LCMapStringA GetStringTypeW GetModuleHandleW GetProcAddress ExitProcess SetConsoleCtrlHandler WriteFile GetStdHandle GetModuleFileNameA HeapCreate HeapDestroy VirtualFree FatalAppExitA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetTimeFormatA GetDateFormatA IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetTimeZoneInformation GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CompareStringW

user32

GetAncestor

Name

.text

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

109KB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

165KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.glue_7t

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ecode

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.debug$T

Size

188KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ