file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 326KB
Sample230109-rhtsbsed84
SHA256 9ccd8472e98cfcc1f46af1786d20635a524f363a4acaeb49ad39af92d08783e7
MD5 b5c6f83ced9aa5067709e0a27b6f8cbc
SHA1 46479182378b81715b98173792dd65ad39b68c03
SHA512 ed1bc2be2e087d6cec3f9eab3c431d3f5581f4c1bbcaa4a4e6e5a9d267fc1236c9805274b5d9827d6135fd45d839dfebb5deb756807e795db7a81162d3df70a1
SSDEEP 6144:6TbGiHLwoUIApd2hNImvf0Y0ued79qog++gw:6TbDHLUIihmvCuC6++gw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 326KB

file.exe

IMPHASH 0cedf6f599cedffda98d28c875e7d31f
SHA256 9ccd8472e98cfcc1f46af1786d20635a524f363a4acaeb49ad39af92d08783e7
MD5 b5c6f83ced9aa5067709e0a27b6f8cbc
SHA1 46479182378b81715b98173792dd65ad39b68c03
SHA512 ed1bc2be2e087d6cec3f9eab3c431d3f5581f4c1bbcaa4a4e6e5a9d267fc1236c9805274b5d9827d6135fd45d839dfebb5deb756807e795db7a81162d3df70a1
SSDEEP 6144:6TbGiHLwoUIApd2hNImvf0Y0ued79qog++gw:6TbDHLUIihmvCuC6++gw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27357

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW GetSystemWindowsDirectoryA Beep GetFileAttributesW WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW ReadConsoleA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA SetConsoleCursorInfo FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue LoadLibraryA SetCriticalSectionSpinCount HeapSize GetConsoleOutputCP GetLastError HeapFree GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted NotifyChangeEventLog

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt