file[.]exe | Triage™

Resubmissions

27/10/2022, 12:25

221027-plkygscba510

27/10/2022, 12:10

221027-pb2hgscbck10

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 2.3MB
Sample221027-plkygscba5
SHA256 bec41e295dad1bddc71f115cf0cde7574315622c184b5bc55dec54957a193333
MD5 3aac91bad8bbea209b1cf9c4b634b38f
SHA1 512ae07aa9509b9c248747cfae637257f04592b0
SHA512 6a4d61424545ce9635d1895d571c501c9fd3f71fb41e8f6d1132383f9a5e66fe4da98c041cf4b8f664377c7f597ff74512a50a70b15684b525e666ff83b764fa
SSDEEP 49152:dN5nqzOJxFsgigHCTkYJLqNc7Yb4eOjd6Xizd8/53KnN:dNtFsgdHEAn81B6Xi64N
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 2.3MB

file.exe

IMPHASH 08569e64bf889aa1485728956b8b0f52
SHA256 bec41e295dad1bddc71f115cf0cde7574315622c184b5bc55dec54957a193333
MD5 3aac91bad8bbea209b1cf9c4b634b38f
SHA1 512ae07aa9509b9c248747cfae637257f04592b0
SHA512 6a4d61424545ce9635d1895d571c501c9fd3f71fb41e8f6d1132383f9a5e66fe4da98c041cf4b8f664377c7f597ff74512a50a70b15684b525e666ff83b764fa
SSDEEP 49152:dN5nqzOJxFsgigHCTkYJLqNc7Yb4eOjd6Xizd8/53KnN:dNtFsgdHEAn81B6Xi64N
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4571

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyA RegSetValueA GetUserNameA RegCloseKey RegOpenKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegQueryValueExA RegDeleteKeyA

kernel32

IsProcessorFeaturePresent GetModuleHandleA GetProcAddress MultiByteToWideChar CreateThread FreeConsole CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess FormatMessageA WideCharToMultiByte EncodePointer DecodePointer LocalFree InitializeCriticalSectionEx LCMapStringEx GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThread HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetConsoleCtrlHandler OutputDebugStringW SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation HeapSize WriteConsoleW

Name

.text

Size

926KB

Virtual Size

925KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

347KB

Virtual Size

346KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.K5X

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

k�w�^�g

Size

212KB

Virtual Size

212KB

Characteristics

IMAGE_SCN_MEM_READ

Name

v m��

Size

219KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_MEM_READ

Name

]R�

Size

215KB

Virtual Size

215KB

Characteristics

IMAGE_SCN_MEM_READ

Name

?'�

Size

230KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_MEM_READ

Name

n�E�|�

Size

207KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_MEM_READ