file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 1.4MB
Sample221104-l43pgaebd7
SHA256 617301672d1f4c05a41450aaf0ba7070c18ea35ebdcf83949501b8ce85549d8a
MD5 df57501bceec0627999a829668b2720d
SHA1 bb5229b80c4d7f0d3b04b39bc9af52fbdd066e8d
SHA512 1a571d962ad30388064810a495c01665cc4d22cc4f6d7a0bb9b1cd0f245ec910d1944bb55b221c1b4458797cb69abc620a3fee9bd30a407d10b264c3c36dc271
SSDEEP 24576:KZ14kOrcy3y6SyuBG018XTrX0vZxTLNBCv4ypqEXVTE/8peJPptCqsUCNGnwAilp:COrcy3MG01YL0hJLHr+qEppStC5UCAno
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 1.4MB

file.exe

IMPHASH 78dee4e11b3000b6380c410474a798f4
SHA256 617301672d1f4c05a41450aaf0ba7070c18ea35ebdcf83949501b8ce85549d8a
MD5 df57501bceec0627999a829668b2720d
SHA1 bb5229b80c4d7f0d3b04b39bc9af52fbdd066e8d
SHA512 1a571d962ad30388064810a495c01665cc4d22cc4f6d7a0bb9b1cd0f245ec910d1944bb55b221c1b4458797cb69abc620a3fee9bd30a407d10b264c3c36dc271
SSDEEP 24576:KZ14kOrcy3y6SyuBG018XTrX0vZxTLNBCv4ypqEXVTE/8peJPptCqsUCNGnwAilp:COrcy3MG01YL0hJLHr+qEppStC5UCAno
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27250

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateThread GetCurrentThreadId GetModuleHandleA GetProcAddress MultiByteToWideChar FreeConsole CreateFileW HeapSize GetProcessHeap WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW

user32

GetWindowLongA

Name

.text

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.kbjhxq

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bfghwq

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�3��

Size

210KB

Virtual Size

210KB

Characteristics

IMAGE_SCN_MEM_READ

Name

�ǲ�md

Size

206KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_MEM_READ

Name

g��O

Size

214KB

Virtual Size

214KB

Characteristics

IMAGE_SCN_MEM_READ

Name

a�

Size

212KB

Virtual Size

212KB

Characteristics

IMAGE_SCN_MEM_READ

Name

\X@�

Size

213KB

Virtual Size

213KB

Characteristics

IMAGE_SCN_MEM_READ