file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 482KB
Sample221209-qsdcnadc44
SHA256 7b4ba9c557949310d6283bcef6613cb577ef3a043647df094c2e3bfc3832da3a
MD5 5027432cdbf550614815fa99fa8a3fed
SHA1 9b62231fb36285f4e093a8d6ca785f6774c0ecf6
SHA512 414838cb32ea8711f2664842bbf20b51254d8333ea188567e0f9809f1878b700a0a46108b4765c0a25c183dfc6d018898f207a50d954cbdb5081fdf482dbc45f
SSDEEP 12288:NlAwL5hdzHgq+EC7g3foqIxwfVzy0IK9W9taw:NtL3VglXg3foxxgzy0x9Et9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 482KB

file.exe

IMPHASH dd021619be333394dbb32a14f86d077c
SHA256 7b4ba9c557949310d6283bcef6613cb577ef3a043647df094c2e3bfc3832da3a
MD5 5027432cdbf550614815fa99fa8a3fed
SHA1 9b62231fb36285f4e093a8d6ca785f6774c0ecf6
SHA512 414838cb32ea8711f2664842bbf20b51254d8333ea188567e0f9809f1878b700a0a46108b4765c0a25c183dfc6d018898f207a50d954cbdb5081fdf482dbc45f
SSDEEP 12288:NlAwL5hdzHgq+EC7g3foqIxwfVzy0IK9W9taw:NtL3VglXg3foxxgzy0x9Et9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28950

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA GetPriorityClass GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesW WriteConsoleW GetVolumePathNameA LCMapStringA FillConsoleOutputCharacterW GetProfileIntW GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle FindActCtxSectionStringW TlsGetValue GetCPInfo GetVolumeNameForVolumeMountPointA GetLastError GetFullPathNameW ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle