file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 222KB
Sample221115-affz1sec28
SHA256 bb53ecf995c9dd9aff1dabffc9362f3847ebe7e2b5d285e0183733f23f897c3c
MD5 9158ebc227733aa7fa77db544d99a9b8
SHA1 d5cddc7a08b93a8314866d0fa720dba40a2e3c82
SHA512 b98c62179e54de510468abd0d01796fce8786dd4883b52dc7036c2c467216ef631c6db2686a14a4d3c22d1e0452e3bdc42f5e885be91aeeb6953c0d46a3464e5
SSDEEP 3072:DEGGlMoszz/fyfA/V0BV8lUkOnFXpnahpDI6RFlScQqiBAXgV0Bx92eedDyYc19Q:D9GmosXfgMqFl2cMlScQq192e+CfQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 222KB

file.exe

IMPHASH 9f346943d702256d1a50869f0f63b2b5
SHA256 bb53ecf995c9dd9aff1dabffc9362f3847ebe7e2b5d285e0183733f23f897c3c
MD5 9158ebc227733aa7fa77db544d99a9b8
SHA1 d5cddc7a08b93a8314866d0fa720dba40a2e3c82
SHA512 b98c62179e54de510468abd0d01796fce8786dd4883b52dc7036c2c467216ef631c6db2686a14a4d3c22d1e0452e3bdc42f5e885be91aeeb6953c0d46a3464e5
SSDEEP 3072:DEGGlMoszz/fyfA/V0BV8lUkOnFXpnahpDI6RFlScQqiBAXgV0Bx92eedDyYc19Q:D9GmosXfgMqFl2cMlScQq192e+CfQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26062

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA GetLocaleInfoA FreeConsole GetNativeSystemInfo IsProcessorFeaturePresent MultiByteToWideChar GetModuleHandleA GetProcAddress Sleep RtlUnwind RaiseException GetCommandLineA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount

gdi32

GetObjectA GetStockObject DeleteObject SetBkMode SetTextColor CreateFontIndirectA SelectObject

comdlg32

GetOpenFileNameA GetSaveFileNameA

advapi32

RegOpenKeyExA RegQueryValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegCloseKey GetUserNameA RegSetValueA RegCreateKeyA RegDeleteKeyA

ole32

CoGetMarshalSizeMax OleRegGetMiscStatus CoGetContextToken StringFromGUID2 StringFromCLSID CoEnableCallCancellation CoLockObjectExternal CoSwitchCallContext CoGetStdMarshalEx CoIsHandlerConnected

comctl32

ImageList_Create ImageList_Destroy InitCommonControlsEx ImageList_ReplaceIcon ImageList_Remove CreateToolbarEx ImageList_SetBkColor