file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 319KB
Sample221209-yxpkgsha6w
SHA256 5e0fd69db9a9beedf4dc3ec1c55314b6131a62998235cd6c42bb0e21f02cd539
MD5 edcaa58fad2d8a5370affeae4b9596df
SHA1 888eeb8a2dc19c3ec486264121292d6cca009464
SHA512 68a61ada52e9cb4886cc06712775d825bc16b47ddc4bbdb1a81dc04f6df2cd648667a97c1533f3b72bc2186d585c642bb150ac03942743c5552b16d74ca61ac7
SSDEEP 6144:TGQZLUKdP6/ndeVg4A9grP+mJr0L8PvSkPch1eFL2Fag:TDoKdy1eVD9F0L8P7UgFLa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 319KB

file.exe

IMPHASH d3b4761b2a14aecd203c0715a7523520
SHA256 5e0fd69db9a9beedf4dc3ec1c55314b6131a62998235cd6c42bb0e21f02cd539
MD5 edcaa58fad2d8a5370affeae4b9596df
SHA1 888eeb8a2dc19c3ec486264121292d6cca009464
SHA512 68a61ada52e9cb4886cc06712775d825bc16b47ddc4bbdb1a81dc04f6df2cd648667a97c1533f3b72bc2186d585c642bb150ac03942743c5552b16d74ca61ac7
SSDEEP 6144:TGQZLUKdP6/ndeVg4A9grP+mJr0L8PvSkPch1eFL2Fag:TDoKdy1eVD9F0L8P7UgFLa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28982

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetPriorityClass GetVolumePathNameW GetVolumeInformationA IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesW WriteConsoleW CreateJobObjectA LCMapStringA GetProfileIntA FillConsoleOutputCharacterW GetLastError GetProcAddress GetSystemDefaultLCID EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle FindActCtxSectionStringW TlsGetValue VirtualAlloc GetFullPathNameA ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogA ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle