file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 194KB
Sample221109-2ghnsacfh4
SHA256 3e45e89d63f4a3f2091d7b1f5b2c331779c735cc45581b3f0d6f293e45fc45f1
MD5 d879588b3878a138d84c21f9e6146f48
SHA1 5f64f9e6200115cdd6060d04b9a6fccd20ebcff4
SHA512 250e1f55c53793ee96c3e72edf42e9725ddbfed121d4a272c698f2e310241a540f410a19e89925a20d3edfc543663fe7977e1d3d7e2e7a5462c2b2a0da65a381
SSDEEP 3072:Uv5ChRQUknU7TfNMXgSrayXVE9y4qQDHg2EPkoTrEsjHZvQ3hl43vpMvxGWqB2cH:dh6zU7T1DylEtDAvPJTrF5vQ37IM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH 64c1eadffab91dbab47828ec42ef51fa
SHA256 3e45e89d63f4a3f2091d7b1f5b2c331779c735cc45581b3f0d6f293e45fc45f1
MD5 d879588b3878a138d84c21f9e6146f48
SHA1 5f64f9e6200115cdd6060d04b9a6fccd20ebcff4
SHA512 250e1f55c53793ee96c3e72edf42e9725ddbfed121d4a272c698f2e310241a540f410a19e89925a20d3edfc543663fe7977e1d3d7e2e7a5462c2b2a0da65a381
SSDEEP 3072:Uv5ChRQUknU7TfNMXgSrayXVE9y4qQDHg2EPkoTrEsjHZvQ3hl43vpMvxGWqB2cH:dh6zU7T1DylEtDAvPJTrF5vQ37IM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18433

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

PlaySoundW timeGetTime

ole32

CreateStreamOnHGlobal CoTaskMemFree CoInitializeEx CoUninitialize CoTaskMemAlloc

msimg32

GradientFill AlphaBlend

user32

IsDialogMessageW CreateDialogParamW DispatchMessageW TranslateMessage PeekMessageW ShowWindow

shell32

DragFinish DragAcceptFiles DragQueryFileW

gdi32

CreateCompatibleBitmap CreateCompatibleDC BitBlt DeleteDC CreateBitmap CreatePen DeleteObject CreateRectRgn

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

kernel32

Sleep EnterCriticalSection GetStringTypeW MultiByteToWideChar LCMapStringW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter DeleteCriticalSection LoadLibraryW RtlUnwind HeapSize LeaveCriticalSection GetStartupInfoW GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW HeapAlloc HeapReAlloc HeapFree GetTickCount CreateIoCompletionPort CloseHandle GetLastError GetQueuedCompletionStatus InterlockedIncrement lstrlenA IsBadStringPtrA IsBadReadPtr GetProcessHeap IsBadCodePtr GetModuleHandleA VirtualQuery GetSystemInfo HeapDestroy HeapCreate GetCommandLineA HeapSetInformation IsProcessorFeaturePresent GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte