file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 322KB
Sample230109-2v4heagb35
SHA256 ef50b2a5ac947e8b1bf0f8f55d97aa5dbdb4f058e950535ef0f478b4428993cc
MD5 4e12ae1af4abdd32b273392ea17b69f8
SHA1 61e71fd270f81e93dc91c6d8a4993f59559abb8d
SHA512 d8feb7d7bac30d75fbad3efe421bffe041b75e48126229b947a594ac8bf2898b892bc5ad191ed181cce8489e4497a5b216f4d7a088e75e58e2c879e2fa3a6dd2
SSDEEP 6144:unV/fO/du2MW7DUN/L+UXZJuRfRZzOwTHU0jVmf/y:uV2t5nUN/L+UXZglzNoq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 46e2ecbaa2319cb9624b037c867ffa79
SHA256 ef50b2a5ac947e8b1bf0f8f55d97aa5dbdb4f058e950535ef0f478b4428993cc
MD5 4e12ae1af4abdd32b273392ea17b69f8
SHA1 61e71fd270f81e93dc91c6d8a4993f59559abb8d
SHA512 d8feb7d7bac30d75fbad3efe421bffe041b75e48126229b947a594ac8bf2898b892bc5ad191ed181cce8489e4497a5b216f4d7a088e75e58e2c879e2fa3a6dd2
SSDEEP 6144:unV/fO/du2MW7DUN/L+UXZJuRfRZzOwTHU0jVmf/y:uV2t5nUN/L+UXZglzNoq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27533

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA Beep GetFileAttributesW GetBinaryTypeA GetConsoleFontSize GetTempPathW LCMapStringA SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW SetComputerNameA ReadConsoleA LoadLibraryA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue IsBadStringPtrW BuildCommDCBW RemoveVectoredExceptionHandler WriteConsoleW GetConsoleOutputCP GetProcessHeap GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize FlushFileBuffers SetEndOfFile

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt