file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 326KB
Sample230109-s2fv9aef93
SHA256 d692fdda357e2d962d96a1b7ddff0aa8a9e3860597dd8f894473f16588d13ced
MD5 a22beaed3316da1ed9bcca9b8cf87ef5
SHA1 a7c088186cce77bf56f3506f14041ed8414b51f6
SHA512 57969bcf4f291fac9ebc22770b366eb2d46fe818a4738d3399c0278f875e3ef4d7431e036b42dd3a309d94101866dc6df95b8a200892412289d1e9c38181a41c
SSDEEP 6144:ZubmvdmGwIlfos4HB+bfGjwhFamX0ued7901gb++gb:ZubGkGFgs4SfdvEuCCyb++gb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 326KB

file.exe

IMPHASH 0cedf6f599cedffda98d28c875e7d31f
SHA256 d692fdda357e2d962d96a1b7ddff0aa8a9e3860597dd8f894473f16588d13ced
MD5 a22beaed3316da1ed9bcca9b8cf87ef5
SHA1 a7c088186cce77bf56f3506f14041ed8414b51f6
SHA512 57969bcf4f291fac9ebc22770b366eb2d46fe818a4738d3399c0278f875e3ef4d7431e036b42dd3a309d94101866dc6df95b8a200892412289d1e9c38181a41c
SSDEEP 6144:ZubmvdmGwIlfos4HB+bfGjwhFamX0ued7901gb++gb:ZubGkGFgs4SfdvEuCCyb++gb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27357

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW GetSystemWindowsDirectoryA Beep GetFileAttributesW WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW ReadConsoleA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA AddVectoredExceptionHandler SetCommMask EnumDateFormatsA SetConsoleCursorInfo FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue LoadLibraryA SetCriticalSectionSpinCount HeapSize GetConsoleOutputCP GetLastError HeapFree GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

IsTokenRestricted NotifyChangeEventLog

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt