file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 381KB
Sample220917-nr99wsdfem
SHA256 17c080f58e43f652fa72ccb3c60ce03228d6c843362cfe716c2873e6af5e8ea7
MD5 4202387c9a3f76bcf0455c9af60ef7e8
SHA1 d24d471a1f77a117c7a0b634bfcb9a36acc606e6
SHA512 841040487ee26277588a1ddaa814b4e285d1be264a47a9074f39b1ca16b6724f4ab823acd0380885a1d8b9c9b743fcbf98a479bea40f5c76d667a7d2fbb54cc3
SSDEEP 6144:PoFoLOLdOjABl/v8xfWrvx0TS3CRRoj7Z7aE070pnigabwVfs:PoGKLd8ABl/v8xfy+TvRC36Oi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 381KB

file.exe

IMPHASH f613baaa81bdeb5ca3cf228320bce0b4
SHA256 17c080f58e43f652fa72ccb3c60ce03228d6c843362cfe716c2873e6af5e8ea7
MD5 4202387c9a3f76bcf0455c9af60ef7e8
SHA1 d24d471a1f77a117c7a0b634bfcb9a36acc606e6
SHA512 841040487ee26277588a1ddaa814b4e285d1be264a47a9074f39b1ca16b6724f4ab823acd0380885a1d8b9c9b743fcbf98a479bea40f5c76d667a7d2fbb54cc3
SSDEEP 6144:PoFoLOLdOjABl/v8xfWrvx0TS3CRRoj7Z7aE070pnigabwVfs:PoGKLd8ABl/v8xfy+TvRC36Oi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31601

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeW CommConfigDialogW SetSystemTimeAdjustment SearchPathA EnumResourceTypesW GetModuleFileNameA UpdateResourceA LoadLibraryW DeleteFileA CopyFileW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasesLengthW PeekConsoleInputW GlobalGetAtomNameA GetShortPathNameW GetPrivateProfileStringW LocalAlloc GetProcAddress GetConsoleAliasA FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesW LockFile lstrcpynA AddAtomW AllocConsole GetLongPathNameW GetProcessHandleCount GetLastError GetSystemDefaultLCID GetSystemDefaultLangID FindNextFileW OpenJobObjectA EnterCriticalSection FindResourceExA _hwrite GlobalUnfix GetComputerNameA GetVersionExA SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileSizeEx GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameW FoldStringW GetModuleHandleA ReleaseActCtx LoadLibraryA CreateFileA CloseHandle RtlUnwind MultiByteToWideChar GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize

user32

ScreenToClient

gdi32

GetCharacterPlacementW

advapi32

CloseEventLog

msimg32

AlphaBlend