file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 383KB
Sample221209-t9ylpsdf22
SHA256 800c961e4231a82a826f5ce8a463b4dac67b4f352d19fb2de2868564b5b8d01d
MD5 2e10571136e4b6093cb1bef13844527a
SHA1 1debe69ef95f151d83884f4febcf2eb97567e74a
SHA512 09ba60090f65c85028e8db81a25a7c237f03e2b1429eeb69e13a347663d75b36fb33dd7c7381d67fe09d3b2d8a484ea03440fad30327751951c37952e0822df3
SSDEEP 6144:BtkLzsfK4g5lAmIdCgg2hv9oJBIU5bD8Rfwc9zsaGeFn2Faa:Be3sf7KsCQhv9RUBYlweFFn8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 383KB

file.exe

IMPHASH eebfb08ed8813b2a3d6d197e243c4c38
SHA256 800c961e4231a82a826f5ce8a463b4dac67b4f352d19fb2de2868564b5b8d01d
MD5 2e10571136e4b6093cb1bef13844527a
SHA1 1debe69ef95f151d83884f4febcf2eb97567e74a
SHA512 09ba60090f65c85028e8db81a25a7c237f03e2b1429eeb69e13a347663d75b36fb33dd7c7381d67fe09d3b2d8a484ea03440fad30327751951c37952e0822df3
SSDEEP 6144:BtkLzsfK4g5lAmIdCgg2hv9oJBIU5bD8Rfwc9zsaGeFn2Faa:Be3sf7KsCQhv9RUBYlweFFn8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA GetPriorityClass GetVolumeInformationA IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesW WriteConsoleW GetVolumePathNameA CreateJobObjectA LCMapStringA GetProfileIntA FillConsoleOutputCharacterW GetLastError GetProcAddress EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle FindActCtxSectionStringW WaitNamedPipeA TlsGetValue VirtualAlloc GetFullPathNameW ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle