file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 459KB
Sample230110-ek8caafd7z
SHA256 d55cdf77f0acd6b87a49b19e9697fceb3722c07e2d7bf58583b97a681921a1c0
MD5 1d6197cbf1573a50dfb9a2cf2cfb7edc
SHA1 b1c73cb1a78898ec3aea86aaa54466589bd2424e
SHA512 fa9711378715abe405c3bc46646c61ffb03a06b69f27f32ca1f330c08aed16d0265de54bd7e09983b9fb981b01381d615b624307b20c69cc27bdcb8a14eef2c0
SSDEEP 6144:N0gJ7c/SyTp8ukLAQ0cJoGqW/I8Na7+67pQDUlbLoVDF+aMPe4dBA0XGqJY:NXZgTpeLAq/g8I6epzl3m9A2q
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 459KB

file.exe

IMPHASH 213d96de9d9d571c94c2ef33b9682892
SHA256 d55cdf77f0acd6b87a49b19e9697fceb3722c07e2d7bf58583b97a681921a1c0
MD5 1d6197cbf1573a50dfb9a2cf2cfb7edc
SHA1 b1c73cb1a78898ec3aea86aaa54466589bd2424e
SHA512 fa9711378715abe405c3bc46646c61ffb03a06b69f27f32ca1f330c08aed16d0265de54bd7e09983b9fb981b01381d615b624307b20c69cc27bdcb8a14eef2c0
SSDEEP 6144:N0gJ7c/SyTp8ukLAQ0cJoGqW/I8Na7+67pQDUlbLoVDF+aMPe4dBA0XGqJY:NXZgTpeLAq/g8I6epzl3m9A2q
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28247

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW TlsSetValue GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA Beep GetFileAttributesW GetBinaryTypeA GetConsoleFontSize GetTempPathW LCMapStringA SetLastError GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW SetComputerNameW LoadLibraryA OpenMutexA WriteConsoleA DnsHostnameToComputerNameA BeginUpdateResourceA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW FreeEnvironmentStringsW GetCurrentThreadId GetCPInfoExA EndUpdateResourceA FindActCtxSectionStringW OpenFileMappingA InterlockedIncrement ReadConsoleA GlobalAddAtomA IsBadStringPtrW RemoveVectoredExceptionHandler WriteConsoleW GetConsoleOutputCP GetProcessHeap GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetFileType SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA CloseHandle CreateFileA SetStdHandle GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetEndOfFile

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

TransparentBlt