file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 327KB
Sample230109-tp8aeaac7s
SHA256 4412f564bb766a81f8a8bc555a8ba7302d27dbb8416e5f61d7fb1b36a5e7a079
MD5 941d6da9d3760e6dda0771f465e5b0f9
SHA1 2bc2dcd66ad3ab5472a131510c06177a1133f14c
SHA512 37437468eb6e71ac150e0aaf84c777a0520a578b4a8d591cf5cac751b7fd880297bde7d3e0c0668d8221ae9c019a99397ea8507c951955393d88fd064e0d3205
SSDEEP 6144:ZnbHzHQi5jmLKhMhilcueqrxZ4Wh7G+TH/P7+mf/S:ZnbTHNlGOdL34WxL5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH f6c84e597491a37c7e33ffbdd25ffc69
SHA256 4412f564bb766a81f8a8bc555a8ba7302d27dbb8416e5f61d7fb1b36a5e7a079
MD5 941d6da9d3760e6dda0771f465e5b0f9
SHA1 2bc2dcd66ad3ab5472a131510c06177a1133f14c
SHA512 37437468eb6e71ac150e0aaf84c777a0520a578b4a8d591cf5cac751b7fd880297bde7d3e0c0668d8221ae9c019a99397ea8507c951955393d88fd064e0d3205
SSDEEP 6144:ZnbHzHQi5jmLKhMhilcueqrxZ4Wh7G+TH/P7+mf/S:ZnbTHNlGOdL34WxL5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA DnsHostnameToComputerNameW Beep GetFileAttributesW WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW SetComputerNameW LoadLibraryA OpenMutexA WriteConsoleA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA GlobalAddAtomA TlsGetValue RemoveVectoredExceptionHandler HeapSize GetConsoleOutputCP GetLastError HeapFree GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt