file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 291KB
Sample220918-ay2pfaeear
SHA256 34df8bcb878502d56964c327a5a3a0c0fbf56cd50f7cc34f7aed8f36a8983691
MD5 778f6cf67b9ee83099a6d8f417f5c194
SHA1 3dedad787585e3c35081034c6f98ea62d4e4cfaf
SHA512 a8b438e9df7fbc9d99653f5b0438080fdfee8cb0250ff336677b6d7e8a76f14d32433f017a745f2d145adcc1d54bf016b1b52a232718e92ff5fe6126daa84277
SSDEEP 6144:VsVLmCtgtDBDKUYPXqrA06sDnigabwVf:VsVSCtSRm/cLDi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 291KB

file.exe

IMPHASH 75d112a417a21f39fc1b1ceff903e344
SHA256 34df8bcb878502d56964c327a5a3a0c0fbf56cd50f7cc34f7aed8f36a8983691
MD5 778f6cf67b9ee83099a6d8f417f5c194
SHA1 3dedad787585e3c35081034c6f98ea62d4e4cfaf
SHA512 a8b438e9df7fbc9d99653f5b0438080fdfee8cb0250ff336677b6d7e8a76f14d32433f017a745f2d145adcc1d54bf016b1b52a232718e92ff5fe6126daa84277
SSDEEP 6144:VsVLmCtgtDBDKUYPXqrA06sDnigabwVf:VsVSCtSRm/cLDi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31679

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeW CommConfigDialogA SetSystemTimeAdjustment FindNextFileA EnumResourceTypesW GetModuleFileNameA UpdateResourceA LoadLibraryW DeleteFileA CopyFileA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW PeekConsoleInputW GlobalGetAtomNameA GetShortPathNameA GetPrivateProfileStringW LocalAlloc GetProcAddress GetConsoleAliasA FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesW LockFile CommConfigDialogW lstrcpynA AddAtomW AllocConsole GetLongPathNameW GetProcessHandleCount GetLastError GetSystemDefaultLCID GetSystemDefaultLangID OpenJobObjectW EnterCriticalSection FindResourceExA _hwrite GlobalWire GetComputerNameA GetVersionExA SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileSizeEx GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameA FoldStringW GetModuleHandleA ReleaseActCtx LoadLibraryA CreateFileA CloseHandle RtlUnwind MultiByteToWideChar GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize

user32

ScreenToClient

gdi32

GetCharacterPlacementW

advapi32

CloseEventLog

msimg32

AlphaBlend