file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 2.4MB
Sample221027-lsrstsbgb2
SHA256 d88a5593ce7ba7728dcdf7d6726f2f492669a4dab26a62029a791dbf5bd0baec
MD5 786da4fcaf680395db940791336d477d
SHA1 a991968047eb42b8257a0c2e537d6c075c4ae160
SHA512 2153ebe88d7af01d6e7ddc8925fc0650249fbbde0a76f6e4a57ed0a0fc70c2737b933366a34ed8e22864c16f968a46d0e2cc4fdbe5e30b1d40d61bfb6d3d3e42
SSDEEP 49152:zNmOUCb2cR8gfJCTwqacE0lKp5OmW22/+vedhfydybAhBoi2:zNfR8UJETacNl8f2PdhqdMA392
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 2.4MB

file.exe

IMPHASH 08569e64bf889aa1485728956b8b0f52
SHA256 d88a5593ce7ba7728dcdf7d6726f2f492669a4dab26a62029a791dbf5bd0baec
MD5 786da4fcaf680395db940791336d477d
SHA1 a991968047eb42b8257a0c2e537d6c075c4ae160
SHA512 2153ebe88d7af01d6e7ddc8925fc0650249fbbde0a76f6e4a57ed0a0fc70c2737b933366a34ed8e22864c16f968a46d0e2cc4fdbe5e30b1d40d61bfb6d3d3e42
SSDEEP 49152:zNmOUCb2cR8gfJCTwqacE0lKp5OmW22/+vedhfydybAhBoi2:zNfR8UJETacNl8f2PdhqdMA392
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4571

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyA RegSetValueA GetUserNameA RegCloseKey RegOpenKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegQueryValueExA RegDeleteKeyA

kernel32

IsProcessorFeaturePresent GetModuleHandleA GetProcAddress MultiByteToWideChar CreateThread FreeConsole CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess FormatMessageA WideCharToMultiByte EncodePointer DecodePointer LocalFree InitializeCriticalSectionEx LCMapStringEx GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThread HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetConsoleCtrlHandler OutputDebugStringW SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation HeapSize WriteConsoleW

Name

.text

Size

926KB

Virtual Size

925KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

347KB

Virtual Size

346KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.D3}

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

0wV

Size

219KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_MEM_READ

Name

��&� ��

Size

234KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_MEM_READ

Name

\*.

Size

207KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_MEM_READ

Name

��h �

Size

239KB

Virtual Size

239KB

Characteristics

IMAGE_SCN_MEM_READ

Name

5ƃ��

Size

217KB

Virtual Size

217KB

Characteristics

IMAGE_SCN_MEM_READ