file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 460KB
Sample230111-hs8jssba35
SHA256 8d90322945a75f95e0298bbb9ca63a2a2bb065d571b542a671b9fc515d9ff9b8
MD5 ac96278fa998809b43306c4186558620
SHA1 0d7c4da22e28a792a8457e17171026237372c274
SHA512 72471fc8f7fee3ebad7235adb275d6514fc3e9618bc8935f94aa6c054d21bc10c75fb7336c8323f5a4e0bb9e501d0fa6ff983e6241bc792b96a1dbdd1004b85f
SSDEEP 6144:RCiVeTbHqzHhEEArKO+lXs2ESVQ1xPaailERgfK0o3ws3fyDqCFwSZG9:R7s3W/Ard9SO7PaDER4K0SwTOC5G
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 460KB

file.exe

IMPHASH 23dff981b91df1879141d9140cd71ef9
SHA256 8d90322945a75f95e0298bbb9ca63a2a2bb065d571b542a671b9fc515d9ff9b8
MD5 ac96278fa998809b43306c4186558620
SHA1 0d7c4da22e28a792a8457e17171026237372c274
SHA512 72471fc8f7fee3ebad7235adb275d6514fc3e9618bc8935f94aa6c054d21bc10c75fb7336c8323f5a4e0bb9e501d0fa6ff983e6241bc792b96a1dbdd1004b85f
SSDEEP 6144:RCiVeTbHqzHhEEArKO+lXs2ESVQ1xPaailERgfK0o3ws3fyDqCFwSZG9:R7s3W/Ard9SO7PaDER4K0SwTOC5G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28343

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap TlsSetValue GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA SetConsoleCursorPosition GetFileAttributesW GetConsoleFontSize MultiByteToWideChar GetTempPathW LCMapStringA SetLastError GetProcAddress AddConsoleAliasW BuildCommDCBW LoadLibraryA WriteConsoleA DnsHostnameToComputerNameA BeginUpdateResourceA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW GetCPInfoExA EndUpdateResourceA GlobalAddAtomW FindActCtxSectionStringW OpenFileMappingA SetFirmwareEnvironmentVariableA SetComputerNameW InterlockedIncrement IsBadStringPtrW VirtualAlloc RemoveVectoredExceptionHandler WriteConsoleW GetConsoleOutputCP SetEndOfFile GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ReadFile SetHandleCount GetFileType SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA CloseHandle CreateFileA SetStdHandle GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

TransparentBlt