fooler[.]exe | Triage™

General

Target
fooler.exe
Size 2.9MB
Sample221112-e7nldsdf78
SHA256 7c8621cc3827c1ffbd39ebc8b24e430e2e6aa5bd7b148edc110be9b2914799dc
MD5 f73c7c5491733bbf72e84a3eec778875
SHA1 d8113a0f0151254616e08bd84683a76fefaeddec
SHA512 d4039cdc4c28cfd0fd8722ba9ca18913f8a7b2624aca86286c06c04208a7bf9476b0217ff4229161178b62fbec6cdef929e4d2878a6fa5cd4d4ef126820a9e0a
SSDEEP 49152:Dgb1V8K/33adBUE9cYsZx1MvxSJG0nnkU2ge2PWDH8Cc+zD:D383sUMsJGqkU2glWDZc+zD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fooler.exe

.exe 2.9MB

fooler.exe

IMPHASH a83a3abb3c24430abc10e29619fc8a0c
SHA256 7c8621cc3827c1ffbd39ebc8b24e430e2e6aa5bd7b148edc110be9b2914799dc
MD5 f73c7c5491733bbf72e84a3eec778875
SHA1 d8113a0f0151254616e08bd84683a76fefaeddec
SHA512 d4039cdc4c28cfd0fd8722ba9ca18913f8a7b2624aca86286c06c04208a7bf9476b0217ff4229161178b62fbec6cdef929e4d2878a6fa5cd4d4ef126820a9e0a
SSDEEP 49152:Dgb1V8K/33adBUE9cYsZx1MvxSJG0nnkU2ge2PWDH8Cc+zD:D383sUMsJGqkU2glWDZc+zD
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

2720824

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle CompareStringW CreateFileW CreateProcessA CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeConsole FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeProcThreadAttributeList InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar OpenProcess Process32First Process32Next QueryPerformanceCounter RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepEx TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UpdateProcThreadAttribute WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile

Sharing