file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 1.7MB
Sample221025-jgdeysbher
SHA256 af59073e2491c0ba8f6ffd994d9e21ff5cb2d037416bd1f7397b67ded01fc2f0
MD5 f27e5a83dd8134bf3c3ba9f23a3aed8d
SHA1 ef7e122e5ca1d462e3498d24d0bf5e5cd0342ac4
SHA512 72b6d9b38d6a3cffeebf2dfb08eac45d383fffaeab67499daaef790bca848727a407d16422af7c8921554cd923e798ea3e670d9cb716110dfe9bc77bd743feac
SSDEEP 24576:rEpKJS2gllP67f7eMjCj93VaBNK77DoJJuUpBRNtQwXjxgQy6WZpj6Mq0GKwBoX6:Fm/ojOCTK7oJJuUhNH+Q40IwoKN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 1.7MB

file.exe

IMPHASH d742af36dbf70ae1be4c1cbc670abd18
SHA256 af59073e2491c0ba8f6ffd994d9e21ff5cb2d037416bd1f7397b67ded01fc2f0
MD5 f27e5a83dd8134bf3c3ba9f23a3aed8d
SHA1 ef7e122e5ca1d462e3498d24d0bf5e5cd0342ac4
SHA512 72b6d9b38d6a3cffeebf2dfb08eac45d383fffaeab67499daaef790bca848727a407d16422af7c8921554cd923e798ea3e670d9cb716110dfe9bc77bd743feac
SSDEEP 24576:rEpKJS2gllP67f7eMjCj93VaBNK77DoJJuUpBRNtQwXjxgQy6WZpj6Mq0GKwBoX6:Fm/ojOCTK7oJJuUhNH+Q40IwoKN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

244515

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsProcessorFeaturePresent GetModuleHandleA GetProcAddress MultiByteToWideChar FreeConsole CreateThread CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess WideCharToMultiByte EncodePointer DecodePointer InitializeCriticalSectionEx LCMapStringEx GetStringTypeW GetCPInfo CreateFileW RaiseException RtlUnwind GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc HeapSize WriteConsoleW

Name

.text

Size

350KB

Virtual Size

350KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

261KB

Virtual Size

260KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

X��

Size

246KB

Virtual Size

246KB

Characteristics

IMAGE_SCN_MEM_READ

Name

��:_B��

Size

209KB

Virtual Size

209KB

Characteristics

IMAGE_SCN_MEM_READ

Name

��e

Size

227KB

Virtual Size

227KB

Characteristics

IMAGE_SCN_MEM_READ

Name

n�

Size

234KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_MEM_READ

Name

F�:�

Size

238KB

Virtual Size

238KB

Characteristics

IMAGE_SCN_MEM_READ