file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 317KB
Sample221222-xa7bcafa24
SHA256 58c3f2e0ad0aafd13baa044af3ad2947eaef8b8d39b69e0e95dabdebd53f5ce6
MD5 ba00abe6668728063afca36b646fff71
SHA1 f046537cfbccb86b624021f433d274e9c5f450ba
SHA512 39e3ac7cfd54051bd23eae6c19647a1e556e248a0575696798208a86bf9c004316366ad158866492489c35cc76cfea1453aff873e53184ff89aa9b12ac7fcca9
SSDEEP 6144:ItkLZxvi4pRUoehRWp00qpuPllmA/RR0cSpQTtyzsduHNIvD:YkVxvi4iWGuPfHRR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 317KB

file.exe

IMPHASH 8ee0a6bdd7d8e9bf5eca4ce8283f3661
SHA256 58c3f2e0ad0aafd13baa044af3ad2947eaef8b8d39b69e0e95dabdebd53f5ce6
MD5 ba00abe6668728063afca36b646fff71
SHA1 f046537cfbccb86b624021f433d274e9c5f450ba
SHA512 39e3ac7cfd54051bd23eae6c19647a1e556e248a0575696798208a86bf9c004316366ad158866492489c35cc76cfea1453aff873e53184ff89aa9b12ac7fcca9
SSDEEP 6144:ItkLZxvi4pRUoehRWp00qpuPllmA/RR0cSpQTtyzsduHNIvD:YkVxvi4iWGuPfHRR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14861

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA SetConsoleMode GetConsoleAliasW MultiByteToWideChar LCMapStringA GetLastError SetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer VirtualAllocEx GetComputerNameW LoadLibraryA WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize FoldStringW FoldStringA QueryMemoryResourceNotification CreateMutexA SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList GetConsoleAliasA GetUserDefaultLCID GetConsoleAliasExesA GetStartupInfoW HeapAlloc TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA

user32

WindowFromDC

gdi32

GetTextExtentExPointW

advapi32

RegQueryInfoKeyA

ole32

CoRevokeMallocSpy