file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 2.3MB
Sample221027-ktwmqsbfb3
SHA256 266cd48dfe2f2be1e1a5837d1e7976146ed0e3e43b8309b157df5e002fc7c300
MD5 e40eabe80a853ce40a701cfd09fa1298
SHA1 830e9ddcdaf235b7785528a190758816d80ec4d5
SHA512 952d2bb21893dcb2fb5f89ed3c953c75a81ad6f5cc3bdf3303807d0d4c79f0b5b1aae733cd5802ec20e4a47a007d5ec20f8514eed07767626eae764a1e291ce7
SSDEEP 49152:ic5AN1Sgt7WlgFWVQ1CTEI6B9Czi45f51OvIA0/F5MB+:icSN8g0q1EH6C7hgAM+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 2.3MB

file.exe

IMPHASH 08569e64bf889aa1485728956b8b0f52
SHA256 266cd48dfe2f2be1e1a5837d1e7976146ed0e3e43b8309b157df5e002fc7c300
MD5 e40eabe80a853ce40a701cfd09fa1298
SHA1 830e9ddcdaf235b7785528a190758816d80ec4d5
SHA512 952d2bb21893dcb2fb5f89ed3c953c75a81ad6f5cc3bdf3303807d0d4c79f0b5b1aae733cd5802ec20e4a47a007d5ec20f8514eed07767626eae764a1e291ce7
SSDEEP 49152:ic5AN1Sgt7WlgFWVQ1CTEI6B9Czi45f51OvIA0/F5MB+:icSN8g0q1EH6C7hgAM+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4571

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyA RegSetValueA GetUserNameA RegCloseKey RegOpenKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegQueryValueExA RegDeleteKeyA

kernel32

IsProcessorFeaturePresent GetModuleHandleA GetProcAddress MultiByteToWideChar CreateThread FreeConsole CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess FormatMessageA WideCharToMultiByte EncodePointer DecodePointer LocalFree InitializeCriticalSectionEx LCMapStringEx GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThread HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetConsoleCtrlHandler OutputDebugStringW SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation HeapSize WriteConsoleW

Name

.text

Size

925KB

Virtual Size

925KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

347KB

Virtual Size

346KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.1"=

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�`�

Size

222KB

Virtual Size

222KB

Characteristics

IMAGE_SCN_MEM_READ

Name

^��^ٽ

Size

202KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_MEM_READ

Name

G��A

Size

205KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_MEM_READ

Name

f��,

Size

202KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_MEM_READ

Name

��~�

Size

242KB

Virtual Size

242KB

Characteristics

IMAGE_SCN_MEM_READ