file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 482KB
Sample221209-sdwlssgc5z
SHA256 fb8188ffb0cf446d8a43dafc15adc94f590f3bbef120b92e950d0acc230de7bd
MD5 eabb111c74b1858f68abda80f3991adc
SHA1 8d8e7342d651e20eaeb6dbfd2ae8dee55e5263b9
SHA512 2c3d5a5fe79fc431140950de722fa1987d5107ac7d407e775f4814263afc1bcf78b3752691ec97ef762343911017673040ad2717bcdf8fd2761e44040f52450a
SSDEEP 12288:b3Ih8Ck4RbY7awmeQdz8g0IK9W9Dg6aw:bJC7caw1m0x9Ek69
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 482KB

file.exe

IMPHASH dd021619be333394dbb32a14f86d077c
SHA256 fb8188ffb0cf446d8a43dafc15adc94f590f3bbef120b92e950d0acc230de7bd
MD5 eabb111c74b1858f68abda80f3991adc
SHA1 8d8e7342d651e20eaeb6dbfd2ae8dee55e5263b9
SHA512 2c3d5a5fe79fc431140950de722fa1987d5107ac7d407e775f4814263afc1bcf78b3752691ec97ef762343911017673040ad2717bcdf8fd2761e44040f52450a
SSDEEP 12288:b3Ih8Ck4RbY7awmeQdz8g0IK9W9Dg6aw:bJC7caw1m0x9Ek69
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28966

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA GetPriorityClass GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesW WriteConsoleW GetVolumePathNameA LCMapStringA FillConsoleOutputCharacterW GetProfileIntW GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle FindActCtxSectionStringW TlsGetValue GetCPInfo GetVolumeNameForVolumeMountPointA GetLastError GetFullPathNameW ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle