file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 327KB
Sample230109-xbrmaafc32
SHA256 611d8d749d2f1f6c3cb07198398aaf6ab5eef0bed7e69871dbe72a2b7eb59feb
MD5 dbf51560192252e53b6b2bc8450d4de8
SHA1 27adddc5518fa832f9ae7c88d9e51e85b5bff4c9
SHA512 4649c37d335b2f14833dbf5c5213712d6e0ae54c42c177ce8235712284cb183c6f9d71e1d3f3cf10eae2c4bbd509a3c86c17716cc3a70f9ddcb0d2544980717c
SSDEEP 6144:6Db2e5I5Q5G8ltsep79uoelWC+THIbmf/a:6DbbWK5NTtKlM0C
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH f6c84e597491a37c7e33ffbdd25ffc69
SHA256 611d8d749d2f1f6c3cb07198398aaf6ab5eef0bed7e69871dbe72a2b7eb59feb
MD5 dbf51560192252e53b6b2bc8450d4de8
SHA1 27adddc5518fa832f9ae7c88d9e51e85b5bff4c9
SHA512 4649c37d335b2f14833dbf5c5213712d6e0ae54c42c177ce8235712284cb183c6f9d71e1d3f3cf10eae2c4bbd509a3c86c17716cc3a70f9ddcb0d2544980717c
SSDEEP 6144:6Db2e5I5Q5G8ltsep79uoelWC+THIbmf/a:6DbbWK5NTtKlM0C
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA DnsHostnameToComputerNameW Beep GetFileAttributesW WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW SetComputerNameW LoadLibraryA OpenMutexA WriteConsoleA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA GlobalAddAtomA TlsGetValue RemoveVectoredExceptionHandler HeapSize GetConsoleOutputCP GetLastError HeapFree GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt