file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 319KB
Sample230111-3bz7baef65
SHA256 e9ef2db2e5849aae9db13ba7bdcf7c108de5d2183a25cc6b6ecc7f49375ad409
MD5 eef80769c378683d61077ebcc9f0b861
SHA1 30c09bbed1163d28890657f69cbfd3bf313086ad
SHA512 9883e0aee7264141e96d8c76a97124c8fdee6b24dcf1b4bd751295e8286db9b9458587bb9d15633907ccf0b9f95cadae063c9422b6e50c3233b3d999c5464769
SSDEEP 6144:AUpUzblVVbCtSsGwADL9VAP3Zi55iNxFz:AJzbbVtLG3ZimN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 319KB

file.exe

IMPHASH cc224966c0ebf7118ef643f039d26f9d
SHA256 e9ef2db2e5849aae9db13ba7bdcf7c108de5d2183a25cc6b6ecc7f49375ad409
MD5 eef80769c378683d61077ebcc9f0b861
SHA1 30c09bbed1163d28890657f69cbfd3bf313086ad
SHA512 9883e0aee7264141e96d8c76a97124c8fdee6b24dcf1b4bd751295e8286db9b9458587bb9d15633907ccf0b9f95cadae063c9422b6e50c3233b3d999c5464769
SSDEEP 6144:AUpUzblVVbCtSsGwADL9VAP3Zi55iNxFz:AJzbbVtLG3ZimN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25759

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW TlsSetValue GetSystemWindowsDirectoryA LeaveCriticalSection DnsHostnameToComputerNameW GetConsoleAliasW GetFileAttributesW WriteConsoleW GetConsoleFontSize MultiByteToWideChar IsBadStringPtrA GetTempPathW lstrcmpiA VirtualAlloc SetComputerNameA LoadLibraryA SetCommMask EnumDateFormatsA SetConsoleCursorInfo FreeEnvironmentStringsW BuildCommDCBA GetFileAttributesExW EndUpdateResourceA GlobalAddAtomW AddConsoleAliasA FindActCtxSectionStringW OpenFileMappingA LCMapStringW GetCurrentProcess InterlockedIncrement FindResourceExW GetProcAddress RemoveVectoredExceptionHandler GetConsoleOutputCP WriteConsoleA ReadFile GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile

user32

WindowFromDC

gdi32

GetCharWidthA

advapi32

IsTokenRestricted DeregisterEventSource ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend