file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 326KB
Sample230109-vpp99seh95
SHA256 96907f9fcbc45b8561600ae72352e02bcd6a74d64cbfc4e41e2d22d4f67c6b32
MD5 2b92dc0582023ee223641add22d9b81e
SHA1 fc942184a208b5e7b4a789949c83a0a9d2e8ea47
SHA512 9f4f3bf330f69953947af074eed79efe519a745e01ff6c1e50f32b577f65f6c07d16a96aae459e3c98f1e4b9a97b39bbc2cf8c11e810da7c7d80322dd3a82552
SSDEEP 6144:OsbajYCd5yYTsvH985OlD/w+THaegmf/W:OsbiH35i/Xe8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 326KB

file.exe

IMPHASH f6c84e597491a37c7e33ffbdd25ffc69
SHA256 96907f9fcbc45b8561600ae72352e02bcd6a74d64cbfc4e41e2d22d4f67c6b32
MD5 2b92dc0582023ee223641add22d9b81e
SHA1 fc942184a208b5e7b4a789949c83a0a9d2e8ea47
SHA512 9f4f3bf330f69953947af074eed79efe519a745e01ff6c1e50f32b577f65f6c07d16a96aae459e3c98f1e4b9a97b39bbc2cf8c11e810da7c7d80322dd3a82552
SSDEEP 6144:OsbajYCd5yYTsvH985OlD/w+THaegmf/W:OsbiH35i/Xe8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA DnsHostnameToComputerNameW Beep GetFileAttributesW WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW SetComputerNameW LoadLibraryA OpenMutexA WriteConsoleA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA GlobalAddAtomA TlsGetValue RemoveVectoredExceptionHandler HeapSize GetConsoleOutputCP GetLastError HeapFree GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt