file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 217KB
Sample221122-wqv3kscc98
SHA256 57bf65723e2e88cb15192a635854f6206d608dee41e2767a4e6b56d9f930dba8
MD5 b0690ffed0292eb5d979ae6a808794dd
SHA1 cf2e55ba4d708bd1278b55227afcaceda7d489a7
SHA512 d606fdc77ebfa1e7eac479a6d8c6728973fe9c5c1f0eac499a2d162ecedc6ecdd3e029a497420ba78b2092d259225b5640deb2427b80c82d154f365cb64c3c7c
SSDEEP 3072:Qk04vs90noT7U4ETyre2xRc0jqr76OlnA9DMpYU4KZe8JbJ3Yl6PR+cpY8jwZS:QkXvS0noUwe2xrjq6O4MJ4bM5Y4+cE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 217KB

file.exe

IMPHASH f889c281b8c32c3abe6d39de60b78eca
SHA256 57bf65723e2e88cb15192a635854f6206d608dee41e2767a4e6b56d9f930dba8
MD5 b0690ffed0292eb5d979ae6a808794dd
SHA1 cf2e55ba4d708bd1278b55227afcaceda7d489a7
SHA512 d606fdc77ebfa1e7eac479a6d8c6728973fe9c5c1f0eac499a2d162ecedc6ecdd3e029a497420ba78b2092d259225b5640deb2427b80c82d154f365cb64c3c7c
SSDEEP 3072:Qk04vs90noT7U4ETyre2xRc0jqr76OlnA9DMpYU4KZe8JbJ3Yl6PR+cpY8jwZS:QkXvS0noUwe2xrjq6O4MJ4bM5Y4+cE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26741

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddAtomW GetCurrentProcessId AssignProcessToJobObject HeapSize GetLocaleInfoA DeleteAtom ReleaseSemaphore CreateEventW FreeConsole PulseEvent GetModuleHandleA GetProcAddress Sleep GetCommandLineA SetUnhandledExceptionFilter GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

advapi32

GetUserNameA RegOpenKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegQueryValueExA RegDeleteKeyA RegSetValueA RegCreateKeyA RegCloseKey

shell32

ord152

version

VerQueryValueW GetFileVersionInfoW VerFindFileW VerInstallFileW GetFileVersionInfoSizeW

comctl32

ImageList_Create ImageList_Destroy InitCommonControlsEx ImageList_ReplaceIcon ImageList_Remove CreateToolbarEx ImageList_SetBkColor