041[.]exe | Triage™

General

Target
041.exe
Size 686KB
Sample220702-q2el3shdc3
SHA256 3d485851cbe0803b00675619b360433ff1517b245d60c19c04e9559c083a5921
MD5 8e809a54f963b2434b6f8417154bc453
SHA1 bb3f18210c45c729a0c153dc90c36a4107a4f4a7
SHA512 87613dce22f1474061bbf0b548036fa6997cc32ed14cc9090878c6bb6d6c52f8e0d7f57099bd20ba0e4bd3138e4aecb762de70bd73ffef97f8104281c33a190e
SSDEEP 12288:5MFBUZXyU5osFCcynTCgU2QunejubM9ekenlz5zFn:5ciXyU5oskFxWuejcgekelz1Fn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

041.exe

.exe 686KB

041.exe

IMPHASH ed15c1224fd33ba1eeca9dd246bc116e
SHA256 3d485851cbe0803b00675619b360433ff1517b245d60c19c04e9559c083a5921
MD5 8e809a54f963b2434b6f8417154bc453
SHA1 bb3f18210c45c729a0c153dc90c36a4107a4f4a7
SHA512 87613dce22f1474061bbf0b548036fa6997cc32ed14cc9090878c6bb6d6c52f8e0d7f57099bd20ba0e4bd3138e4aecb762de70bd73ffef97f8104281c33a190e
SSDEEP 12288:5MFBUZXyU5osFCcynTCgU2QunejubM9ekenlz5zFn:5ciXyU5oskFxWuejcgekelz1Fn
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

c8:82:1b:bb:fe:34:30:98:4b:bf:00:3c:af:b2:69:9d:4f:6f:54:e3:95:f8:fb:7e:dd:ab:7a:01:0e:47:c0:fe

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11587

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_SYSTEM

PDB paths

kernel32

GlobalMemoryStatus WriteConsoleInputW lstrlenA GetDefaultCommConfigW BuildCommDCBAndTimeoutsA FreeLibrary LoadResource SetWaitableTimer SetUnhandledExceptionFilter LoadLibraryExW ZombifyActCtx GlobalSize SetEnvironmentVariableW CreateJobObjectW HeapFree SetHandleInformation GetProfileSectionA ConnectNamedPipe CallNamedPipeW CreateNamedPipeW VirtualFree EnumTimeFormatsW TzSpecificLocalTimeToSystemTime SetProcessPriorityBoost TlsSetValue GetPriorityClass GlobalAlloc GetVolumeInformationA GetConsoleMode GetSystemPowerStatus CreateMutexW SetVolumeMountPointA GetVersionExW DeleteVolumeMountPointW LeaveCriticalSection SetConsoleCursorPosition GetFileAttributesW VerifyVersionInfoA TerminateProcess ReadFile GetTimeZoneInformation GetBinaryTypeW DeactivateActCtx GetLastError SetComputerNameA GetLocalTime LoadLibraryA OpenMutexA MoveFileA GetCommMask GetOEMCP DebugSetProcessKillOnExit CreateIoCompletionPort VirtualProtect GetCurrentDirectoryA GetSystemTime GetConsoleSelectionInfo lstrcpyA SizeofResource GetCommandLineW DeleteFileA HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind EnterCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualAlloc GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP IsValidCodePage MultiByteToWideChar HeapSize WideCharToMultiByte GetConsoleCP FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA GetModuleHandleA

user32

GetAncestor GetTitleBarInfo

advapi32

RevertToSelf

Sharing