file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 454KB
Sample230109-2fcq5sbe4z
SHA256 b0e25ddff72d519dccd3cafe6401ea98f49dabb9f05f6188f8492011a8e6e0b3
MD5 34d68bdb78174aff7fda4d1f1145b6ed
SHA1 9f676539c92319d6e841d0dedc264b0de83b7961
SHA512 8f0e9cea33f2c744fd5db427bd4d0762e7c73754505952ed151cb6750054eeb7aad2bec0485d61e0be8bd61c4c4fecb8bc41c05fd0d66870a14362a2cc8c0af1
SSDEEP 12288:+j4URUQruoJ967wKkK7O/zAqLZK9FIwhHO:+j44UPq9LK7OcUZcHO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 454KB

file.exe

IMPHASH 46e2ecbaa2319cb9624b037c867ffa79
SHA256 b0e25ddff72d519dccd3cafe6401ea98f49dabb9f05f6188f8492011a8e6e0b3
MD5 34d68bdb78174aff7fda4d1f1145b6ed
SHA1 9f676539c92319d6e841d0dedc264b0de83b7961
SHA512 8f0e9cea33f2c744fd5db427bd4d0762e7c73754505952ed151cb6750054eeb7aad2bec0485d61e0be8bd61c4c4fecb8bc41c05fd0d66870a14362a2cc8c0af1
SSDEEP 12288:+j4URUQruoJ967wKkK7O/zAqLZK9FIwhHO:+j44UPq9LK7OcUZcHO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27533

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA Beep GetFileAttributesW GetBinaryTypeA GetConsoleFontSize GetTempPathW LCMapStringA SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW SetComputerNameA ReadConsoleA LoadLibraryA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue IsBadStringPtrW BuildCommDCBW RemoveVectoredExceptionHandler WriteConsoleW GetConsoleOutputCP GetProcessHeap GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize FlushFileBuffers SetEndOfFile

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt