file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 381KB
Sample220917-jttmpsdchm
SHA256 fa180d788066c58a8bcb27729bbe5bdcba7887b5eacff50effc3af1206fd4eee
MD5 84a4e8454dd3e6f9e59955463b91e4f1
SHA1 d5dc4ea8cafb441e68e8c697911d705941475aec
SHA512 8da6f5dcb65ade1ce1aff7e7178bba60369d8332f012a61e164da5caea28aaea1fa5bc29eb02466b265c00f14e7c8a8cf94f4ee026e3ba075c4a35aef57bf996
SSDEEP 6144:0Oy30LzDKSW5Lv1rhRqeXbxbtQKW1GUXWPbFGS0ym/nigabwVf:0T30XDK5L1rhAgxbnZWXi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 381KB

file.exe

IMPHASH 4b393ce781f88ec37a3de29c3e378af7
SHA256 fa180d788066c58a8bcb27729bbe5bdcba7887b5eacff50effc3af1206fd4eee
MD5 84a4e8454dd3e6f9e59955463b91e4f1
SHA1 d5dc4ea8cafb441e68e8c697911d705941475aec
SHA512 8da6f5dcb65ade1ce1aff7e7178bba60369d8332f012a61e164da5caea28aaea1fa5bc29eb02466b265c00f14e7c8a8cf94f4ee026e3ba075c4a35aef57bf996
SSDEEP 6144:0Oy30LzDKSW5Lv1rhRqeXbxbtQKW1GUXWPbFGS0ym/nigabwVf:0T30XDK5L1rhAgxbnZWXi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31215

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedCompareExchange OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeW CommConfigDialogW SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetModuleFileNameA UpdateResourceA LoadLibraryW DeleteFileA CopyFileW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasesLengthW PeekConsoleInputW GlobalGetAtomNameA GetShortPathNameW GetPrivateProfileStringW LocalAlloc ReleaseActCtx GetConsoleAliasA FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesW LockFile lstrcpynA AddAtomW AllocConsole GetLongPathNameA GetProcessHandleCount GetLastError GetSystemDefaultLCID GetSystemDefaultLangID FindNextFileW OpenJobObjectA EnterCriticalSection FindResourceExA _hwrite GlobalUnfix GetComputerNameA VerifyVersionInfoW SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileSizeEx GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameW GetModuleHandleA GetProcAddress LoadLibraryA CreateFileA CloseHandle RtlUnwind GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize

user32

ScreenToClient

gdi32

GetCharacterPlacementW

advapi32

CloseEventLog

msimg32

AlphaBlend