file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 316KB
Sample221223-af2lqafe53
SHA256 383354b526b2d5c3aa88397b22e393b872d03e6e27f8a44e7a553ac3c3dcb30b
MD5 a2ad75c0390304ba197c910acb3e7b2b
SHA1 4cb6e682f420629f3c06c6622fbdf3543fb0abc6
SHA512 ca9e77bcedffa19d6da64773750c11c81991a3fbba826b4f240eaab69117865e3facc391ee11f450c3c8fdc21afd145d843f7bab047fa2c9db71ef3f06d340a8
SSDEEP 6144:XpLh5gjBytXE5b8jCfwd7GsA0Y/yaRR0cSpQTtyzsduHNIv:XpF5gNytXE5bMuwd7tORR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 316KB

file.exe

IMPHASH 83591f62aa1432af9c580674ba7082e0
SHA256 383354b526b2d5c3aa88397b22e393b872d03e6e27f8a44e7a553ac3c3dcb30b
MD5 a2ad75c0390304ba197c910acb3e7b2b
SHA1 4cb6e682f420629f3c06c6622fbdf3543fb0abc6
SHA512 ca9e77bcedffa19d6da64773750c11c81991a3fbba826b4f240eaab69117865e3facc391ee11f450c3c8fdc21afd145d843f7bab047fa2c9db71ef3f06d340a8
SSDEEP 6144:XpLh5gjBytXE5b8jCfwd7GsA0Y/yaRR0cSpQTtyzsduHNIv:XpF5gNytXE5bMuwd7tORR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14733

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW TlsSetValue LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA SetConsoleMode WriteConsoleW MultiByteToWideChar GlobalUnfix GetLastError SetLastError GetProcAddress VirtualAlloc VirtualAllocEx AddConsoleAliasW LoadLibraryA WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize FoldStringA QueryMemoryResourceNotification CreateMutexA SetThreadAffinityMask EndUpdateResourceA GetConsoleProcessList LCMapStringW GetConsoleAliasExesA GetConsoleAliasA GetComputerNameA GetStartupInfoW HeapAlloc TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA

user32

WindowFromDC

gdi32

GetTextExtentExPointW

advapi32

RegQueryInfoKeyA

ole32

CoRevokeMallocSpy