file[.]exe | Triage

General

Target

file.exe
Size

298KB
MD5

6e55a48e462fe19cde26ab662cba6621
SHA1

8280f6bdf2fc5d2a97a25946ec776cffbde64fb5
SHA256

d858f935b50e98ec5892abd549e73d303138cb2818436a270714537ab2f2664c
SHA512

dd3eac61d579ce1182bb9f447741d8edaffedc56f687e4cebe413522e9affd5f67b492ca19992da6871f408aa72d88ac4fa9a9de6fca7c2971f867c93c79171d
SSDEEP

6144:dG+nl1pR6EkMN9F8fXtCGuu8mhU1Khn8cscstntJApA7aDnD:M+tR6EkMN9F8fXcGuudhDpstntJ6A2TD

Score

N/A

Malware Config

Signatures

Files

file.exe
.exe windows x86

dc6b2dc0d2c2e11d087ee801ed634e87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
VirtualAlloc
lstrlenA
lstrcmpA
CloseHandle
HeapAlloc
GetModuleHandleExW
FreeLibrary
ExitProcess
Sleep
GetProcAddress
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

msvcrt

?_set_new_mode@@YAHH@Z
_msize
?terminate@@YAXXZ
realloc
_acmdln
_ismbblead
__getmainargs
__set_app_type
_XcptFilter
_errno
free
_controlfp_s
__p__commode
_set_fmode
_initterm_e
_initterm
clock
_amsg_exit
_except_handler4_common
memset
__CxxFrameHandler3

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

vJS93lS
Size: 279KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc6b2dc0d2c2e11d087ee801ed634e87

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 780B

vJS93lS Size: 279KB - Virtual size: 280KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 780B

vJS93lS
Size: 279KB - Virtual size: 280KB