file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 322KB
Sample230109-z7bbaabc7x
SHA256 5f7d8c54d372f7a235109a2f808bbfb18680de898b71cf0eaae6d0e93af788c1
MD5 ebff2e248cbf58c2e82b87482e5dac7a
SHA1 3a68cf6841d25cafe471a0895d5591c29fa1d848
SHA512 de5fef0e2102e6f6883c2025ddd9046d3d2c9be1409bf8dda84b3d808cf402cfad7606ddbfb75b08495e61a6d9766b2ca5972332e8c099229ff1e7c49164e5e7
SSDEEP 6144:gDyxB+YauVTQBBuWHFb66PZwTHWRmf/G:g2rb5QBBxxFeJO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 322KB

file.exe

IMPHASH 46e2ecbaa2319cb9624b037c867ffa79
SHA256 5f7d8c54d372f7a235109a2f808bbfb18680de898b71cf0eaae6d0e93af788c1
MD5 ebff2e248cbf58c2e82b87482e5dac7a
SHA1 3a68cf6841d25cafe471a0895d5591c29fa1d848
SHA512 de5fef0e2102e6f6883c2025ddd9046d3d2c9be1409bf8dda84b3d808cf402cfad7606ddbfb75b08495e61a6d9766b2ca5972332e8c099229ff1e7c49164e5e7
SSDEEP 6144:gDyxB+YauVTQBBuWHFb66PZwTHWRmf/G:g2rb5QBBxxFeJO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27533

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameW GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA Beep GetFileAttributesW GetBinaryTypeA GetConsoleFontSize GetTempPathW LCMapStringA SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW SetComputerNameA ReadConsoleA LoadLibraryA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA FindActCtxSectionStringW OpenFileMappingA GlobalAddAtomA InterlockedIncrement TlsGetValue IsBadStringPtrW BuildCommDCBW RemoveVectoredExceptionHandler WriteConsoleW GetConsoleOutputCP GetProcessHeap GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize FlushFileBuffers SetEndOfFile

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpCheckPlatform

msimg32

TransparentBlt