new[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
new.exe
Size 498KB
Sample220701-q2aywsgce4
SHA256 7da1b87c80b960324cf66de21fb10d04c9a22864786926fe3965ea9f56353d11
MD5 d45be0997ab95f6b3881b14528276a75
SHA1 9bfd019c5de71af44fff2c48b7929271c5bdf0dc
SHA512 75f8bd0ada1bcd961847d7b21c1cc8c4a5a913452959e37f96516b2cf752696c45d01d91afbae24e3f79536d6ab6ad77c7f43ca560a6bfeb992acb685c35506c
SSDEEP 12288:ozaY83phjsUYzw8tb9aOM7NCN1IEMxYsOevYt7M2h1y/S3:lNWUYzwOY37O1IEMjOevYt7M2h1z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

new.exe

.exe 498KB

new.exe

IMPHASH 9ccb8d78f748eb70afd267647e41d62d
SHA256 7da1b87c80b960324cf66de21fb10d04c9a22864786926fe3965ea9f56353d11
MD5 d45be0997ab95f6b3881b14528276a75
SHA1 9bfd019c5de71af44fff2c48b7929271c5bdf0dc
SHA512 75f8bd0ada1bcd961847d7b21c1cc8c4a5a913452959e37f96516b2cf752696c45d01d91afbae24e3f79536d6ab6ad77c7f43ca560a6bfeb992acb685c35506c
SSDEEP 12288:ozaY83phjsUYzw8tb9aOM7NCN1IEMxYsOevYt7M2h1y/S3:lNWUYzwOY37O1IEMjOevYt7M2h1z
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

6e:47:ff:ae:b4:ea:5a:ae:12:d6:01:27:12:d4:5b:29:32:c8:9e:1b:21:3f:e0:a8:5a:f5:6d:38:75:dc:64:d0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

31170

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCompact SetPriorityClass lstrlenA CopyFileExW GetDriveTypeW CommConfigDialogA BuildCommDCBAndTimeoutsA FreeLibrary GetCommState CreateJobObjectW GetNamedPipeHandleStateA WaitForSingleObject AddConsoleAliasW GetComputerNameW SetCommState SetProcessPriorityBoost InitializeCriticalSection ActivateActCtx GlobalAlloc LoadLibraryW _hread GetVersionExW GetBinaryTypeA IsDBCSLeadByte ReadFile lstrcatA GetOverlappedResult GetACP RaiseException SetLastError GetTapeStatus VirtualAlloc BeginUpdateResourceW CopyFileA GetConsoleDisplayMode IsSystemResumeAutomatic SetConsoleOutputCP AddAtomW PostQueuedCompletionStatus GetPrivateProfileStructA SetEnvironmentVariableA GetPrivateProfileSectionNamesA GetOEMCP EnumDateFormatsA GetThreadPriority CreateIoCompletionPort DebugBreakProcess CreateMutexA VirtualProtect GetCurrentDirectoryA LocalSize CompareStringA CreateFileA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind LCMapStringW LCMapStringA GetStringTypeW GetModuleHandleW GetProcAddress ExitProcess SetConsoleCtrlHandler WriteFile GetStdHandle GetModuleFileNameA HeapCreate HeapDestroy VirtualFree FatalAppExitA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetTimeFormatA GetDateFormatA IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetTimeZoneInformation GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CompareStringW

user32

GetAncestor

Name

.text

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

109KB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.udata

Size

55KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.stabstr

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.minAT

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.sdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.xdata

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Shared

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ