file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 290KB
Sample220904-m3z3maefgn
SHA256 03be5f8770fc0af7fe8500f5e4da1d5168cbb481762136170f71881e2d8b277d
MD5 cfbf0254653d24c3221297c753fbc4e0
SHA1 d8f69fe5f6bd3a58b78fa294ed003204124a6289
SHA512 24624bc9011ed674e53273d3d781cf67e101ecbc2777366b30180d4aef97dfbfc78e994175c6d0f403b16921c365262044fc40756b56e6d085b14a141e03128b
SSDEEP 3072:1nRbXRatR1HLB4Lg+cG0N7teXU6YKqKXnb+tHgCIOlsrM:gtR1HLHtLeXU6YZ1gn6s
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 290KB

file.exe

IMPHASH 6290483e6b3dabc25dfc4d74dc84bb37
SHA256 03be5f8770fc0af7fe8500f5e4da1d5168cbb481762136170f71881e2d8b277d
MD5 cfbf0254653d24c3221297c753fbc4e0
SHA1 d8f69fe5f6bd3a58b78fa294ed003204124a6289
SHA512 24624bc9011ed674e53273d3d781cf67e101ecbc2777366b30180d4aef97dfbfc78e994175c6d0f403b16921c365262044fc40756b56e6d085b14a141e03128b
SSDEEP 3072:1nRbXRatR1HLB4Lg+cG0N7teXU6YKqKXnb+tHgCIOlsrM:gtR1HLHtLeXU6YZ1gn6s
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16586

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA OpenWaitableTimerW WaitNamedPipeA CommConfigDialogA GetSystemTimeAdjustment SearchPathA EnumResourceTypesA GetCPInfoExA EnumResourceTypesW GetModuleFileNameW WriteConsoleOutputCharacterA GetConsoleAliasesLengthA DeleteFileA FillConsoleOutputCharacterW GetProcAddress VirtualAlloc LoadLibraryA ReleaseActCtx GetConsoleAliasA GetStringTypeA WritePrivateProfileStringW EnumResourceNamesA LocalReAlloc lstrcpynA AddAtomW FreeConsole GetSystemDefaultLCID GetSystemDefaultLangID GetLastError GlobalAlloc GetComputerNameExW FindNextFileA GetPriorityClass ScrollConsoleScreenBufferA OpenJobObjectW InitializeCriticalSection FindResourceExW SetConsoleMode _hwrite GlobalWire GetComputerNameA VerifyVersionInfoA IsDBCSLeadByte FillConsoleOutputCharacterA SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileAttributesExA GetVolumePathNameA FoldStringA FindFirstChangeNotificationW CloseHandle CreateFileA WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc RtlUnwind LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer ReadFile SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA

gdi32

GetCharWidth32A GetFontUnicodeRanges

ole32

CoRegisterMallocSpy

winhttp

WinHttpCloseHandle

msimg32

TransparentBlt