file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 326KB
Sample230109-pws2vahf3x
SHA256 e8d80e726e802a57312c8a94e0c867c67481ba8da9abadc3dde6828040689cd8
MD5 2c25efc7209726721d6f3a533ba0049c
SHA1 e636f2b2457015262a1e7f65d0838c25a491f705
SHA512 a0f96367e2ae647394197b4c2124d12c64d50d9a1f812894684cb84380b4726f714916737aaa565ad6674d753ce5a9e6396431528432d8e80e8171103d2cca7f
SSDEEP 3072:NXOC8uMF/lGGQ88Aku5xgLIG8FmcZKfconX3sF3foEYRAymWsuTqdlAGWS96fY6R:JxeF/l3+ywccfcg8xMcWsued79AB++g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 326KB

file.exe

IMPHASH 20ebb8b4d8ab10d7ca0d82c627ddd4a0
SHA256 e8d80e726e802a57312c8a94e0c867c67481ba8da9abadc3dde6828040689cd8
MD5 2c25efc7209726721d6f3a533ba0049c
SHA1 e636f2b2457015262a1e7f65d0838c25a491f705
SHA512 a0f96367e2ae647394197b4c2124d12c64d50d9a1f812894684cb84380b4726f714916737aaa565ad6674d753ce5a9e6396431528432d8e80e8171103d2cca7f
SSDEEP 3072:NXOC8uMF/lGGQ88Aku5xgLIG8FmcZKfconX3sF3foEYRAymWsuTqdlAGWS96fY6R:JxeF/l3+ywccfcg8xMcWsued79AB++g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27613

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetPriorityClass GetSystemWindowsDirectoryA GetFileAttributesA Beep WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW LoadLibraryA ReadConsoleA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA FreeEnvironmentStringsW GetFileAttributesExW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue OpenMutexA SetCriticalSectionSpinCount GetConsoleOutputCP HeapSize GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType Sleep ExitProcess WriteFile GetModuleFileNameA SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted NotifyChangeEventLog

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt