file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 458KB
Sample230109-p9scgaec24
SHA256 c1dad679cd8123e8c86c366c3de9a9fd3000f3c496d9f4e121e8e1da3d076bbd
MD5 11169ae4ab35b60f45ad2b38c05b9081
SHA1 1bfe99d7075b31a915c5ed37269f1ea52f0449b0
SHA512 6023a03a931311ce2a3cb2baac04edb17a5a4563f20b0f61a115ad594739fe80512d2b31c7f07725c57ef7804647dca14e1621ee7c0a9e47befb32f0d9133f2e
SSDEEP 6144:ar6Fb9s9Dh8ncx8e6fHQNyRkoB0lnyTLLjFHalr2CNyBued79gtXAv4++g1:a+Fpsf8NfwG0liLjFH62CsuCWtD++g1
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 458KB

file.exe

IMPHASH 20ebb8b4d8ab10d7ca0d82c627ddd4a0
SHA256 c1dad679cd8123e8c86c366c3de9a9fd3000f3c496d9f4e121e8e1da3d076bbd
MD5 11169ae4ab35b60f45ad2b38c05b9081
SHA1 1bfe99d7075b31a915c5ed37269f1ea52f0449b0
SHA512 6023a03a931311ce2a3cb2baac04edb17a5a4563f20b0f61a115ad594739fe80512d2b31c7f07725c57ef7804647dca14e1621ee7c0a9e47befb32f0d9133f2e
SSDEEP 6144:ar6Fb9s9Dh8ncx8e6fHQNyRkoB0lnyTLLjFHalr2CNyBued79gtXAv4++g1:a+Fpsf8NfwG0liLjFH62CsuCWtD++g1
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27629

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW LoadLibraryA ReadConsoleA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetConsoleOutputCP HeapSize GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted NotifyChangeEventLog

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt