file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 297KB
Sample221227-pq7caaeh49
SHA256 02a2eb47b6d8711c8a76cf30e0835a91ae9289540cfc9091ce837b809932c507
MD5 749551a28b74476d9d7c57e4ed38cd3a
SHA1 97b40326cc3733f80143e09cb8db0254a5636124
SHA512 d1decb1a206cf882475301ebaff5eca5b60711f5752f016b73d761a8ef659d89729c4b3a70dccf36db8f16e68b10322bd5fbb5b519271791febd64d966146e62
SSDEEP 6144:izLsOPW/bUqXETue76PY58xQ3xDPkMo5zXbAc:izYfb5feWPY58xaxDPyrbA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 297KB

file.exe

IMPHASH a79883bc740f2c520976af45297a075c
SHA256 02a2eb47b6d8711c8a76cf30e0835a91ae9289540cfc9091ce837b809932c507
MD5 749551a28b74476d9d7c57e4ed38cd3a
SHA1 97b40326cc3733f80143e09cb8db0254a5636124
SHA512 d1decb1a206cf882475301ebaff5eca5b60711f5752f016b73d761a8ef659d89729c4b3a70dccf36db8f16e68b10322bd5fbb5b519271791febd64d966146e62
SSDEEP 6144:izLsOPW/bUqXETue76PY58xQ3xDPkMo5zXbAc:izYfb5feWPY58xaxDPyrbA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13924

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons AddConsoleAliasW GetModuleHandleW LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc VirtualAllocEx GetConsoleAliasA WriteConsoleA LockResource SetProcessWorkingSetSize GetModuleHandleA QueryMemoryResourceNotification CreateMutexA FreeEnvironmentStringsW SetThreadAffinityMask EndUpdateResourceA GetConsoleProcessList LCMapStringW TlsGetValue GetConsoleAliasExesA LoadLibraryA GetComputerNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

WindowFromDC

gdi32

GetTextExtentExPointA

advapi32

RegQueryInfoKeyW

ole32

CoRegisterMallocSpy