file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 317KB
Sample221223-cazlaaff48
SHA256 08be23cebdc53d9ecc6aa253aa0bce787af7d4739716a749d8242cc07c8354e5
MD5 0f7d368efd9ab809afe6a19b67e25404
SHA1 bcd5d7e92b1959ae79234013ee878bb066568ac2
SHA512 80c99b3a7ee9d291d66a898f57f0f23d69b47a3fa81bd91e546116e1ab806f0a9e2cee5aad13b5641c3d184b93ee1e2b9c89242490f9f32243663b8e745b6e6b
SSDEEP 6144:OHLhWaybXfl5ect30099T9rb+RR0cSpQTtyzsduHNIv:OHdWay7lQk0ATh6RR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 317KB

file.exe

IMPHASH 83591f62aa1432af9c580674ba7082e0
SHA256 08be23cebdc53d9ecc6aa253aa0bce787af7d4739716a749d8242cc07c8354e5
MD5 0f7d368efd9ab809afe6a19b67e25404
SHA1 bcd5d7e92b1959ae79234013ee878bb066568ac2
SHA512 80c99b3a7ee9d291d66a898f57f0f23d69b47a3fa81bd91e546116e1ab806f0a9e2cee5aad13b5641c3d184b93ee1e2b9c89242490f9f32243663b8e745b6e6b
SSDEEP 6144:OHLhWaybXfl5ect30099T9rb+RR0cSpQTtyzsduHNIv:OHdWay7lQk0ATh6RR0TCtyYduHNI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14733

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW TlsSetValue LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA SetConsoleMode WriteConsoleW MultiByteToWideChar GlobalUnfix GetLastError SetLastError GetProcAddress VirtualAlloc VirtualAllocEx AddConsoleAliasW LoadLibraryA WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize FoldStringA QueryMemoryResourceNotification CreateMutexA SetThreadAffinityMask EndUpdateResourceA GetConsoleProcessList LCMapStringW GetConsoleAliasExesA GetConsoleAliasA GetComputerNameA GetStartupInfoW HeapAlloc TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA

user32

WindowFromDC

gdi32

GetTextExtentExPointW

advapi32

RegQueryInfoKeyA

ole32

CoRevokeMallocSpy