file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 297KB
Sample221121-ak2saabd93
SHA256 57dcbc18f90c578be783d25705113d4deb105fa7c66d2e7119974d22c8f483f5
MD5 703803d10a8bce7032e2a7417d037fdc
SHA1 1d39a52869b2f8f16e26395727e15b0091d0694c
SHA512 3feaf5c8440ba8970d0e5c1a92e089f2d8ea2007c5806f220ed802de8276ce73ff0c2859390beb86ed741d2eeab348b752d1e59a4533483ed5763212e1d518f6
SSDEEP 6144:Bgz8tQltcizMgKqJx+qYi/iEoZ0Qm8N0riP5FrdLgUpaowI9L3TP:mz8ta2qJc/wiaw5FrdkUpaowIp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 297KB

file.exe

IMPHASH e8a73eab249f57a85749bc031decc9b5
SHA256 57dcbc18f90c578be783d25705113d4deb105fa7c66d2e7119974d22c8f483f5
MD5 703803d10a8bce7032e2a7417d037fdc
SHA1 1d39a52869b2f8f16e26395727e15b0091d0694c
SHA512 3feaf5c8440ba8970d0e5c1a92e089f2d8ea2007c5806f220ed802de8276ce73ff0c2859390beb86ed741d2eeab348b752d1e59a4533483ed5763212e1d518f6
SSDEEP 6144:Bgz8tQltcizMgKqJx+qYi/iEoZ0Qm8N0riP5FrdLgUpaowI9L3TP:mz8ta2qJc/wiaw5FrdkUpaowIp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

61565

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InitializeCriticalSectionAndSpinCount LoadLibraryA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocaleInfoA IsValidCodePage GetOEMCP GetACP HeapSize CloseHandle SetFilePointer ReadFile FlushFileBuffers GetConsoleMode GetConsoleCP HeapReAlloc VirtualAlloc GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter VirtualFree HeapCreate GetStartupInfoA GetFileType SetHandleCount WriteConsoleA FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetModuleFileNameA GetStdHandle WriteFile ExitProcess HeapAlloc GetCurrentThreadId SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleW GetCPInfo LCMapStringW WideCharToMultiByte LCMapStringA HeapFree GetLastError IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCommandLineA RaiseException RtlUnwind DeleteCriticalSection InterlockedDecrement InterlockedIncrement GetConsoleOutputCP WriteConsoleW SetStdHandle GetLocaleInfoW CreateFileA Sleep InitializeCriticalSection CreateEventW CreateFileW AddAtomW LockFileEx GetFileSize GetVersion GetFileInformationByHandle SetEndOfFile DeleteAtom SetEvent EnterCriticalSection ResetEvent LeaveCriticalSection GetFileSizeEx FreeConsole AssignProcessToJobObject MultiByteToWideChar GetModuleHandleA GetProcAddress GetEnvironmentStringsW

user32

GetWindowLongA wvsprintfA SetWindowPos FindWindowA RedrawWindow GetWindowTextA EnableWindow GetSystemMetrics IsWindow CheckRadioButton UnregisterClassA SetCursor GetSysColorBrush DialogBoxParamA DestroyAcceleratorTable DispatchMessageA TranslateMessage LoadIconA EmptyClipboard SetClipboardData SetFocus CharUpperA OpenClipboard IsDialogMessageA TranslateAcceleratorA GetMessageA LoadAcceleratorsA RemoveMenu InvalidateRect ChildWindowFromPoint PostMessageA DestroyCursor CreateDialogParamA GetWindowRect IsMenu GetSubMenu SetDlgItemInt GetWindowPlacement CharLowerBuffA EnableMenuItem CheckMenuRadioItem GetSysColor KillTimer DestroyIcon DestroyWindow PostQuitMessage GetClientRect MoveWindow GetSystemMenu SetTimer SetWindowPlacement InsertMenuItemA GetMenu CheckMenuItem SetMenuItemInfoA SetActiveWindow DefDlgProcA RegisterClassA EndDialog SetDlgItemTextA EnumClipboardFormats GetClipboardData CloseClipboard GetClassInfoA CallWindowProcA SetWindowLongA IsDlgButtonChecked SetWindowTextA CheckDlgButton GetActiveWindow LoadCursorA MessageBoxA wsprintfA GetDlgItemTextA SendMessageA GetCursorPos TrackPopupMenu ClientToScreen DestroyMenu CreatePopupMenu AppendMenuA SendDlgItemMessageA GetDlgItem

gdi32

SetBkMode GetObjectA DeleteObject SelectObject CreateFontIndirectA GetStockObject SetTextColor

comdlg32

GetSaveFileNameA GetOpenFileNameA

advapi32

RegCloseKey RegDeleteKeyA RegQueryValueExA RegCreateKeyA RegSetValueA GetUserNameA DecryptFileW RegOpenKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

comctl32

ImageList_Create ImageList_Destroy ImageList_SetBkColor CreateToolbarEx ImageList_Remove ImageList_ReplaceIcon InitCommonControlsEx