file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 384KB
Sample221209-vwegcadf53
SHA256 28925c3dbb89301a158ade1ff7f18b840f4361cf7136cd788ec94cb7eab9b58d
MD5 332489293f425b32935ab61b9ec16e75
SHA1 153cf3d94e2c19a862574a070df3320fcb23213b
SHA512 d0419e1d95599fbc146ff9f98e875dd183c4dcfc9aa87788cf25a0d73640f312b45eea12905c7245b02f0b6b90592d0d1f472904447a266e76283126a9332936
SSDEEP 6144:S0HOLZkCq0wzTtBlOEzKDkWrr4ZfwcbRSpveFn2Fa7Fns:S3FkCHUTtBlOkUr4twwRS4FnPs
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 384KB

file.exe

IMPHASH eebfb08ed8813b2a3d6d197e243c4c38
SHA256 28925c3dbb89301a158ade1ff7f18b840f4361cf7136cd788ec94cb7eab9b58d
MD5 332489293f425b32935ab61b9ec16e75
SHA1 153cf3d94e2c19a862574a070df3320fcb23213b
SHA512 d0419e1d95599fbc146ff9f98e875dd183c4dcfc9aa87788cf25a0d73640f312b45eea12905c7245b02f0b6b90592d0d1f472904447a266e76283126a9332936
SSDEEP 6144:S0HOLZkCq0wzTtBlOEzKDkWrr4ZfwcbRSpveFn2Fa7Fns:S3FkCHUTtBlOkUr4twwRS4FnPs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28934

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA GetPriorityClass GetVolumeInformationA IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesW WriteConsoleW GetVolumePathNameA CreateJobObjectA LCMapStringA GetProfileIntA FillConsoleOutputCharacterW GetLastError GetProcAddress EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle FindActCtxSectionStringW WaitNamedPipeA TlsGetValue VirtualAlloc GetFullPathNameW ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle