file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 316KB
Sample221222-xcbmfsab61
SHA256 f8a0b42c3b7d667f4d4141bc1774f5a7a08682f67b2f3a2eadf987e42e0f9629
MD5 7478149f26248b8edf19581bf4773680
SHA1 e28be0eb0e147388dc7bd0ce9fbc240c439f9f0c
SHA512 3d7c2955be4aaeaf2e91999663cc4257c5e9af64a7a6da9b2a1e230be8dac2b57fd869dd5f6f04a779aba81035df8654627611dd255589c30503516205c75677
SSDEEP 6144:8pLzYDiDRXonT7RR0cSpQTtyzsduHNIv3:8pHYDiFoT7RR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 316KB

file.exe

IMPHASH 8ee0a6bdd7d8e9bf5eca4ce8283f3661
SHA256 f8a0b42c3b7d667f4d4141bc1774f5a7a08682f67b2f3a2eadf987e42e0f9629
MD5 7478149f26248b8edf19581bf4773680
SHA1 e28be0eb0e147388dc7bd0ce9fbc240c439f9f0c
SHA512 3d7c2955be4aaeaf2e91999663cc4257c5e9af64a7a6da9b2a1e230be8dac2b57fd869dd5f6f04a779aba81035df8654627611dd255589c30503516205c75677
SSDEEP 6144:8pLzYDiDRXonT7RR0cSpQTtyzsduHNIv3:8pHYDiFoT7RR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14861

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA SetConsoleMode GetConsoleAliasW MultiByteToWideChar LCMapStringA GetLastError SetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer VirtualAllocEx GetComputerNameW LoadLibraryA WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize FoldStringW FoldStringA QueryMemoryResourceNotification CreateMutexA SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList GetConsoleAliasA GetUserDefaultLCID GetConsoleAliasExesA GetStartupInfoW HeapAlloc TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA

user32

WindowFromDC

gdi32

GetTextExtentExPointW

advapi32

RegQueryInfoKeyA

ole32

CoRevokeMallocSpy