file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 421KB
Sample221209-tkmsxagd5w
SHA256 b41300b36598c97def7004f3e0a60f52b04c1d78de0edec2c71668e41ed894e5
MD5 db819acbb5ae76ef170adaa9869b3e24
SHA1 a42b899cc590c52ae63a276359be0d2e4d26e99f
SHA512 6e15275062efc6fa32c23ab98bfe746d78b140fdd4c7183c53964df9d9020457a1dd609ebf717be9cc48d7915331adfbd794d0926ecede74c945c85bc89fb67b
SSDEEP 6144:t30PLOfMUeXE/2xr0HkL8ALKsZAHahh6K9W9FehSmFded89kTR:t3kKfMPU/Gr0w8ZEPIK9W9FehSmmaw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 421KB

file.exe

IMPHASH dd021619be333394dbb32a14f86d077c
SHA256 b41300b36598c97def7004f3e0a60f52b04c1d78de0edec2c71668e41ed894e5
MD5 db819acbb5ae76ef170adaa9869b3e24
SHA1 a42b899cc590c52ae63a276359be0d2e4d26e99f
SHA512 6e15275062efc6fa32c23ab98bfe746d78b140fdd4c7183c53964df9d9020457a1dd609ebf717be9cc48d7915331adfbd794d0926ecede74c945c85bc89fb67b
SSDEEP 6144:t30PLOfMUeXE/2xr0HkL8ALKsZAHahh6K9W9FehSmFded89kTR:t3kKfMPU/Gr0w8ZEPIK9W9FehSmmaw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28966

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA GetPriorityClass GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesW WriteConsoleW GetVolumePathNameA LCMapStringA FillConsoleOutputCharacterW GetProfileIntW GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle FindActCtxSectionStringW TlsGetValue GetCPInfo GetVolumeNameForVolumeMountPointA GetLastError GetFullPathNameW ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle