file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 483KB
Sample221209-t1c9eade85
SHA256 49e6332a5d2c1bf27e7d6c2343c35b9d98c39d6c8bb203b9e2fff4234496becb
MD5 e2acb3bd66fe2de6bf8f2a59873827fc
SHA1 c701ffab05527558e25ba5efbb8e24c7f27e0f54
SHA512 feb806036a04dbb8312b8fd0a4877590fbf13d3e755d806324cc6086c21dfbe3acfef712766a463e021c18f684bf4d3b19312548b032944a77f7c276bbea52d3
SSDEEP 12288:xBaApcTAjFW4GdW9TBGiXtKw2gflFnDs:xbpzU4fToiXowHn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 483KB

file.exe

IMPHASH eebfb08ed8813b2a3d6d197e243c4c38
SHA256 49e6332a5d2c1bf27e7d6c2343c35b9d98c39d6c8bb203b9e2fff4234496becb
MD5 e2acb3bd66fe2de6bf8f2a59873827fc
SHA1 c701ffab05527558e25ba5efbb8e24c7f27e0f54
SHA512 feb806036a04dbb8312b8fd0a4877590fbf13d3e755d806324cc6086c21dfbe3acfef712766a463e021c18f684bf4d3b19312548b032944a77f7c276bbea52d3
SSDEEP 12288:xBaApcTAjFW4GdW9TBGiXtKw2gflFnDs:xbpzU4fToiXowHn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28934

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA GetPriorityClass GetVolumeInformationA IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesW WriteConsoleW GetVolumePathNameA CreateJobObjectA LCMapStringA GetProfileIntA FillConsoleOutputCharacterW GetLastError GetProcAddress EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle FindActCtxSectionStringW WaitNamedPipeA TlsGetValue VirtualAlloc GetFullPathNameW ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle