file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 325KB
Sample230109-ybsp1sfd87
SHA256 65f855e19809b1453e16d5df3b3da63b594dd8b3f392ba0fc7db3afefc4d3493
MD5 df7994ce22d0bf3ca96f3fcdbc6354ec
SHA1 45d2b8cef02285041fe91151add77648e23a3530
SHA512 f62281a07bcf13d743d4be2fcf465ecbadb0b88b6fc6cce05c565ee86def331925fec658ced7978d23fcd56f7279b3bdf537031520c2c8d9953d0f3a5bd4c388
SSDEEP 6144:AKb9AqP5eKwnoeesTFgKfqeM4P+THIyXi/mf/c:AKb2iCorEgKfqeM4mxXf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 325KB

file.exe

IMPHASH f6c84e597491a37c7e33ffbdd25ffc69
SHA256 65f855e19809b1453e16d5df3b3da63b594dd8b3f392ba0fc7db3afefc4d3493
MD5 df7994ce22d0bf3ca96f3fcdbc6354ec
SHA1 45d2b8cef02285041fe91151add77648e23a3530
SHA512 f62281a07bcf13d743d4be2fcf465ecbadb0b88b6fc6cce05c565ee86def331925fec658ced7978d23fcd56f7279b3bdf537031520c2c8d9953d0f3a5bd4c388
SSDEEP 6144:AKb9AqP5eKwnoeesTFgKfqeM4P+THIyXi/mf/c:AKb2iCorEgKfqeM4mxXf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA DnsHostnameToComputerNameW Beep GetFileAttributesW WriteConsoleW GetBinaryTypeA GetConsoleFontSize LCMapStringA SetLastError GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW SetComputerNameW LoadLibraryA OpenMutexA WriteConsoleA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA DebugBreak GetTempPathA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA GlobalAddAtomA TlsGetValue RemoveVectoredExceptionHandler HeapSize GetConsoleOutputCP GetLastError HeapFree GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetEndOfFile GetProcessHeap

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt