file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 277KB
Sample220901-lbbqaaddg8
SHA256 ba4a68ee31a36145da3762f43ce530068e4debc7e69c61ca647f015ec040c7fb
MD5 669bfd62687954669c8e26c92743f0ed
SHA1 a3d643dc70d5582d6fb8c3528d48356a76496ba7
SHA512 4c0792e3a49bb267ff96d056c4073ae164d9aef0d76019d3711fb37fe66d6f0d1ad3029d7991daceb556abfe416158b5aeca8c9273b90bff5702a42896a6f577
SSDEEP 3072:xtc7XJgB3LkbPs2oAlkAveRMkHrVD4uvi4VgaU7O:x9LkbPnCRMCr2Qi4VK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 277KB

file.exe

IMPHASH 87441594d3de44f1a0456f0d6f52e874
SHA256 ba4a68ee31a36145da3762f43ce530068e4debc7e69c61ca647f015ec040c7fb
MD5 669bfd62687954669c8e26c92743f0ed
SHA1 a3d643dc70d5582d6fb8c3528d48356a76496ba7
SHA512 4c0792e3a49bb267ff96d056c4073ae164d9aef0d76019d3711fb37fe66d6f0d1ad3029d7991daceb556abfe416158b5aeca8c9273b90bff5702a42896a6f577
SSDEEP 3072:xtc7XJgB3LkbPs2oAlkAveRMkHrVD4uvi4VgaU7O:x9LkbPnCRMCr2Qi4VK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17137

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringW SetWaitableTimer WaitNamedPipeW CommConfigDialogW SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetCPInfoExA EnumResourceTypesA GetModuleFileNameW WriteConsoleOutputCharacterW GetConsoleAliasesLengthW DeleteFileA FillConsoleOutputCharacterW LocalAlloc GetProcAddress GetModuleHandleW VirtualAlloc LoadLibraryW AddRefActCtx GetConsoleAliasW WritePrivateProfileStringW EnumResourceNamesA LocalFileTimeToFileTime LocalReAlloc lstrcpynA AddAtomW FreeConsole VirtualProtect GetComputerNameExW FindNextFileW SetPriorityClass ScrollConsoleScreenBufferA OpenJobObjectA InitializeCriticalSection FindResourceExW SetConsoleMode _lclose GlobalUnWire GetComputerNameA VerifyVersionInfoW GetLastError GetSystemDefaultLCID GetThreadLocale GetFileAttributesExA ReadConsoleA GetVolumePathNameA GetModuleHandleA GetStringTypeA FindFirstChangeNotificationW Sleep ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetLocaleInfoA WideCharToMultiByte HeapAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeW

gdi32

GetCharWidth32A GetFontUnicodeRanges

advapi32

CloseEventLog GetOldestEventLogRecord ReportEventW

ole32

CoRegisterMallocSpy

winhttp

WinHttpSetTimeouts WinHttpReadData

msimg32

TransparentBlt