file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 793KB
Sample230102-x8drpaba9t
SHA256 d8259dc862c48015701fa0d459375878b82e1fbc42aa68467ff46a491c5330da
MD5 9ade93f6b68a66da712fedafcdd4269a
SHA1 03ed85e0b7d86748cbd927fe11c72ef10f930041
SHA512 f1798a28fa2adc6b3e6be1d2bf3829b975dfb7978311f37520ff621645b0cb726ffdb21fd53cd8f5686c84e79ce74ab21f6656759545f704ae2b82b327c52574
SSDEEP 24576:hLAt3ieGOGoNOcfLtAz2QFPlePWBoyFIj:te/VNLFIAPxyY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 793KB

file.exe

IMPHASH 9deee1339fdd9dd87c8bd76cb88d8290
SHA256 d8259dc862c48015701fa0d459375878b82e1fbc42aa68467ff46a491c5330da
MD5 9ade93f6b68a66da712fedafcdd4269a
SHA1 03ed85e0b7d86748cbd927fe11c72ef10f930041
SHA512 f1798a28fa2adc6b3e6be1d2bf3829b975dfb7978311f37520ff621645b0cb726ffdb21fd53cd8f5686c84e79ce74ab21f6656759545f704ae2b82b327c52574
SSDEEP 24576:hLAt3ieGOGoNOcfLtAz2QFPlePWBoyFIj:te/VNLFIAPxyY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

516404

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetNativeSystemInfo HeapAlloc GetProcAddress GetProcessHeap FreeLibrary lstrlenA FindNextFileA lstrcmpA GlobalMemoryStatusEx VirtualAlloc VirtualFree SetLastError HeapFree SetEndOfFile WriteConsoleW HeapSize VirtualProtect IsBadReadPtr SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx CompareStringEx GetCPInfo GetStringTypeW CloseHandle CreateFileW ReadFile WriteFile GetLastError FindClose QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetFileType FindFirstFileExW FindNextFileW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle HeapReAlloc GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW GetTimeZoneInformation SetStdHandle lstrcmpiW

user32

GetDC

gdi32

GetCurrentObject

shell32

SHGetFolderPathA SHGetKnownFolderPath ShellExecuteA

iphlpapi

GetAdaptersInfo

gdiplus

GdipSaveImageToStream GdiplusShutdown GdiplusStartup GdipDisposeImage GdipCreateBitmapFromHBITMAP

urlmon

URLDownloadToFileA

advapi32

CryptGenRandom CryptReleaseContext CryptAcquireContextA