file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 297KB
Sample221227-rad2xafa25
SHA256 99e6df65c31270df7cf923f2afaf7de0b3094e71e83a76805ff2d31d3c3a1584
MD5 7667d49d65f8341fedc8257d2d8544bc
SHA1 deeded6bfec65a98c65fdbfe4d5df3561da7bca9
SHA512 f51a25d983f5d49b502c8e231640af1189ea7f46dd8c44caeda69d4a61b856e5333ec2620d0dae9106b719ab6d9726f5e7d36922293fc667c60166216c6fdb52
SSDEEP 6144:oabLA9SHoU19kVI58xQ3xDPkMo5zXbAc:xb8qoYWI58xaxDPyrbA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 297KB

file.exe

IMPHASH a79883bc740f2c520976af45297a075c
SHA256 99e6df65c31270df7cf923f2afaf7de0b3094e71e83a76805ff2d31d3c3a1584
MD5 7667d49d65f8341fedc8257d2d8544bc
SHA1 deeded6bfec65a98c65fdbfe4d5df3561da7bca9
SHA512 f51a25d983f5d49b502c8e231640af1189ea7f46dd8c44caeda69d4a61b856e5333ec2620d0dae9106b719ab6d9726f5e7d36922293fc667c60166216c6fdb52
SSDEEP 6144:oabLA9SHoU19kVI58xQ3xDPkMo5zXbAc:xb8qoYWI58xaxDPyrbA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14022

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleMouseButtons AddConsoleAliasW GetModuleHandleW LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA WriteConsoleW MultiByteToWideChar SetLastError GetProcAddress VirtualAlloc VirtualAllocEx GetConsoleAliasA WriteConsoleA LockResource SetProcessWorkingSetSize GetModuleHandleA QueryMemoryResourceNotification CreateMutexA FreeEnvironmentStringsW SetThreadAffinityMask EndUpdateResourceA GetConsoleProcessList LCMapStringW TlsGetValue GetConsoleAliasExesA LoadLibraryA GetComputerNameA HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

WindowFromDC

gdi32

GetTextExtentExPointA

advapi32

RegQueryInfoKeyW

ole32

CoRegisterMallocSpy