file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 327KB
Sample230110-e7nw6aga6x
SHA256 b8f204e631a5a4fa4244878060cd249a63df9fbbc2ad8b8e01b0936b943cbd4a
MD5 3ca36972593202bb097af631b2e5ddec
SHA1 31d8a1cb4d7fe1edccf3f10a97751a6c9c1062bc
SHA512 0c6326f349c988047f13a8ec617e0a8dcfedd5811988c4ee0743c65a01e832140065ae3b71b7a2099310f4e6c63a1be5620821be52221a1270a368c297cfb021
SSDEEP 6144:EABZ5fwEY3NZE/AYcIsn8ZoAT2xreZ7dBA0Xzf8JY:Ek1nYdZVtznjAsrezD8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH 213d96de9d9d571c94c2ef33b9682892
SHA256 b8f204e631a5a4fa4244878060cd249a63df9fbbc2ad8b8e01b0936b943cbd4a
MD5 3ca36972593202bb097af631b2e5ddec
SHA1 31d8a1cb4d7fe1edccf3f10a97751a6c9c1062bc
SHA512 0c6326f349c988047f13a8ec617e0a8dcfedd5811988c4ee0743c65a01e832140065ae3b71b7a2099310f4e6c63a1be5620821be52221a1270a368c297cfb021
SSDEEP 6144:EABZ5fwEY3NZE/AYcIsn8ZoAT2xreZ7dBA0Xzf8JY:Ek1nYdZVtznjAsrezD8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28231

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW TlsSetValue GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA Beep GetFileAttributesW GetBinaryTypeA GetConsoleFontSize GetTempPathW LCMapStringA SetLastError GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW SetComputerNameW LoadLibraryA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA BeginUpdateResourceA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA GlobalAddAtomA IsBadStringPtrW RemoveVectoredExceptionHandler WriteConsoleW GetConsoleOutputCP GetProcessHeap GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetFileType SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA CloseHandle CreateFileA SetStdHandle GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetEndOfFile

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

TransparentBlt