file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 316KB
Sample221222-zzfk2afb93
SHA256 c2d39c8ceaa12aa24a956e6863320d6802bc73d01e2137f875d9e78518eb7f0c
MD5 d7b67d5c697bbf9f7388268de8321a26
SHA1 7fc96b6403293934fbe7a79a49dbc07a5b10cecc
SHA512 923673f25faeecdc041c244f96b9fc12e348dbbbfdcb82f3a393cc1fc87413c1e60a465bc072336bdfa5df9787b24fea7ac51a0e0ec7ae4f542f33fd57b91bfa
SSDEEP 6144:9R0LdxlrwySrlXrmoOMQpo8h1LRR0cSpQTtyzsduHNIv:/05xlrwySNivpZLRR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 316KB

file.exe

IMPHASH aa69363e169a060275eb2629fa3c57c6
SHA256 c2d39c8ceaa12aa24a956e6863320d6802bc73d01e2137f875d9e78518eb7f0c
MD5 d7b67d5c697bbf9f7388268de8321a26
SHA1 7fc96b6403293934fbe7a79a49dbc07a5b10cecc
SHA512 923673f25faeecdc041c244f96b9fc12e348dbbbfdcb82f3a393cc1fc87413c1e60a465bc072336bdfa5df9787b24fea7ac51a0e0ec7ae4f542f33fd57b91bfa
SSDEEP 6144:9R0LdxlrwySrlXrmoOMQpo8h1LRR0cSpQTtyzsduHNIv:/05xlrwySNivpZLRR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14845

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW TlsSetValue GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA SetConsoleMode GetConsoleAliasW MultiByteToWideChar GlobalUnfix GetLastError SetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer VirtualAllocEx GetComputerNameW LoadLibraryA WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize FoldStringW GetModuleHandleA QueryMemoryResourceNotification CreateMutexA SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList LCMapStringW GetConsoleAliasA GetUserDefaultLCID GetConsoleAliasExesA GetStartupInfoW HeapAlloc TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

WindowFromDC

gdi32

GetTextExtentExPointW

advapi32

RegQueryInfoKeyA

ole32

CoRevokeMallocSpy