file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 793KB
Sample221128-cfkdjsfd36
SHA256 bab5d791f19ba26e098c678e62cd76efac81ddce8bf5243915994b46aa1c2142
MD5 38efcf810fd037fe3034e027eafe861e
SHA1 34c0bad3180cf4dec626fc2f5f0b977a7055621f
SHA512 63138971c96951bde4b97d8a54c74b23d291102758dfaaefa905178b7306118dbf048551aee2ebe95e008f502fbca0496c37a11bb7aa1e74602e63d61348ba5d
SSDEEP 24576:hLAt3ieGOGoNOcfLtAz2QFPlePWBoyZIj:te/VNLFIAPxqY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 793KB

file.exe

IMPHASH 9deee1339fdd9dd87c8bd76cb88d8290
SHA256 bab5d791f19ba26e098c678e62cd76efac81ddce8bf5243915994b46aa1c2142
MD5 38efcf810fd037fe3034e027eafe861e
SHA1 34c0bad3180cf4dec626fc2f5f0b977a7055621f
SHA512 63138971c96951bde4b97d8a54c74b23d291102758dfaaefa905178b7306118dbf048551aee2ebe95e008f502fbca0496c37a11bb7aa1e74602e63d61348ba5d
SSDEEP 24576:hLAt3ieGOGoNOcfLtAz2QFPlePWBoyZIj:te/VNLFIAPxqY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

516404

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetNativeSystemInfo HeapAlloc GetProcAddress GetProcessHeap FreeLibrary lstrlenA FindNextFileA lstrcmpA GlobalMemoryStatusEx VirtualAlloc VirtualFree SetLastError HeapFree SetEndOfFile WriteConsoleW HeapSize VirtualProtect IsBadReadPtr SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx CompareStringEx GetCPInfo GetStringTypeW CloseHandle CreateFileW ReadFile WriteFile GetLastError FindClose QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetFileType FindFirstFileExW FindNextFileW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle HeapReAlloc GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW GetTimeZoneInformation SetStdHandle lstrcmpiW

user32

GetDC

gdi32

GetCurrentObject

shell32

SHGetFolderPathA SHGetKnownFolderPath ShellExecuteA

iphlpapi

GetAdaptersInfo

gdiplus

GdipSaveImageToStream GdiplusShutdown GdiplusStartup GdipDisposeImage GdipCreateBitmapFromHBITMAP

urlmon

URLDownloadToFileA

advapi32

CryptGenRandom CryptReleaseContext CryptAcquireContextA