file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 1.7MB
Sample221025-ljrfpscbf9
SHA256 dd9d6e2d8ef7d51ba57f8a52c3480e166be83bb30e57ae9a590d6e952d37fe26
MD5 20e2dacfc1c49202a4883592707b392f
SHA1 cb1ff26a834a189a33790e6c1d86f3f549262aff
SHA512 157769cffa11a3419ac47cb149461f79976a239769d182964fce6dd0b8cc8663b0cbeb331f5f84b755ae1988cf165d670e553d64fc48d5a7bdf1c1e503d3fb4f
SSDEEP 49152:HJT8jRCTkLbfHIwOxZ0svthG2DpPJPrQ0+bnw30p:pT8jREMb/IwO0slhtDPLiw30p
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 1.7MB

file.exe

IMPHASH d742af36dbf70ae1be4c1cbc670abd18
SHA256 dd9d6e2d8ef7d51ba57f8a52c3480e166be83bb30e57ae9a590d6e952d37fe26
MD5 20e2dacfc1c49202a4883592707b392f
SHA1 cb1ff26a834a189a33790e6c1d86f3f549262aff
SHA512 157769cffa11a3419ac47cb149461f79976a239769d182964fce6dd0b8cc8663b0cbeb331f5f84b755ae1988cf165d670e553d64fc48d5a7bdf1c1e503d3fb4f
SSDEEP 49152:HJT8jRCTkLbfHIwOxZ0svthG2DpPJPrQ0+bnw30p:pT8jREMb/IwO0slhtDPLiw30p
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

244515

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsProcessorFeaturePresent GetModuleHandleA GetProcAddress MultiByteToWideChar FreeConsole CreateThread CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess WideCharToMultiByte EncodePointer DecodePointer InitializeCriticalSectionEx LCMapStringEx GetStringTypeW GetCPInfo CreateFileW RaiseException RtlUnwind GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc HeapSize WriteConsoleW

Name

.text

Size

350KB

Virtual Size

350KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

261KB

Virtual Size

260KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

I�

Size

246KB

Virtual Size

246KB

Characteristics

IMAGE_SCN_MEM_READ

Name

'$�_�

Size

232KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_MEM_READ

Name

StԴ�o�

Size

203KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_MEM_READ

Name

��1on�1

Size

239KB

Virtual Size

239KB

Characteristics

IMAGE_SCN_MEM_READ

Name

��

Size

239KB

Virtual Size

239KB

Characteristics

IMAGE_SCN_MEM_READ