file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 1.4MB
Sample221104-mntbjagdfm
SHA256 f19e361d171f85d8325fd4138c5d14ea750ea66f3b07536da50bbd54ad398ba9
MD5 0309d84dc78f594ca2a7c51f369ce1c8
SHA1 bce0ad7e79908ed7cb32f078c1b5da6577139a54
SHA512 74ba242c1dd63ce0e09e19effae329333b9735dda7cfcbbf93f329fac9dc725a3242af3f87bd412799515e268329767a6ec57442e21f692ba22349d514d1da6b
SSDEEP 24576:Gc1oRFeGZS3y6SyuwY1IO9oPWm805pjyS3y8P0YX7f3TmS67g/2dB0fbvj6ST9rC:QFeGZS3bpvDy8dXT567O2d+bhTBC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 1.4MB

file.exe

IMPHASH 78dee4e11b3000b6380c410474a798f4
SHA256 f19e361d171f85d8325fd4138c5d14ea750ea66f3b07536da50bbd54ad398ba9
MD5 0309d84dc78f594ca2a7c51f369ce1c8
SHA1 bce0ad7e79908ed7cb32f078c1b5da6577139a54
SHA512 74ba242c1dd63ce0e09e19effae329333b9735dda7cfcbbf93f329fac9dc725a3242af3f87bd412799515e268329767a6ec57442e21f692ba22349d514d1da6b
SSDEEP 24576:Gc1oRFeGZS3y6SyuwY1IO9oPWm805pjyS3y8P0YX7f3TmS67g/2dB0fbvj6ST9rC:QFeGZS3bpvDy8dXT567O2d+bhTBC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27250

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateThread GetCurrentThreadId GetModuleHandleA GetProcAddress MultiByteToWideChar FreeConsole CreateFileW HeapSize GetProcessHeap WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW

user32

GetWindowLongA

Name

.text

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.kbjhxq

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bfghwq

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

M��2

Size

201KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_MEM_READ

Name

��ۥ

Size

224KB

Virtual Size

224KB

Characteristics

IMAGE_SCN_MEM_READ

Name

s��K��

Size

202KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_MEM_READ

Name

+_O

Size

222KB

Virtual Size

222KB

Characteristics

IMAGE_SCN_MEM_READ

Name

Size

230KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_MEM_READ