file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 326KB
Sample230109-pjbl2aeb33
SHA256 7d9e65a93d88d686247668cf8ff04e1a878219b4e047c3f227a6e427fd65f20a
MD5 a62dee97d92ff9d5bf0b5a320488e99f
SHA1 61b2353435f7b7ba68905d02a2de30886aea034e
SHA512 2cd7b0d9e45c11a7447186d4b0502a0f694a54a6e223a2fb39bd00dfd1b5c2625f3870e5d5b069994bb807a12bd341d120d4ed071293744a0f7752ad44fc017a
SSDEEP 6144:5RIFpxSZDhzlYFWhoRnlLm76Wsued79Qp++g1:5yFfSVYwqlLmeuCWp++g1
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 326KB

file.exe

IMPHASH 20ebb8b4d8ab10d7ca0d82c627ddd4a0
SHA256 7d9e65a93d88d686247668cf8ff04e1a878219b4e047c3f227a6e427fd65f20a
MD5 a62dee97d92ff9d5bf0b5a320488e99f
SHA1 61b2353435f7b7ba68905d02a2de30886aea034e
SHA512 2cd7b0d9e45c11a7447186d4b0502a0f694a54a6e223a2fb39bd00dfd1b5c2625f3870e5d5b069994bb807a12bd341d120d4ed071293744a0f7752ad44fc017a
SSDEEP 6144:5RIFpxSZDhzlYFWhoRnlLm76Wsued79Qp++g1:5yFfSVYwqlLmeuCWp++g1
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27629

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW LoadLibraryA ReadConsoleA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetConsoleOutputCP HeapSize GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted NotifyChangeEventLog

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt