file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 453KB
Sample230111-wpqfpsdf99
SHA256 ed4e4058f01be9faa0222586e0ba4817cb7f573a5ff21145698ad976dbd54b65
MD5 840039bf13bb9197b2b2cfe2ce0be458
SHA1 659200ebed37c5f2076d77bc3cf207f78a2cbb9b
SHA512 fc587d652382eed4e00f5b0506c59c97f622a579a1b125706d494d1b1c19d378f4ffe1259f98503fe988070bc457b1d465ab21eaaa55ac2bbbbf060194747ed3
SSDEEP 6144:yHHIqVq4RrfKI242vVU70b+WYimERAAI40R9TUuNVH7xmPclSp9z+kcvP3Zi53tu:yoqVq55SwKiQ4S9TXNS9zY3Zidt/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 453KB

file.exe

IMPHASH 3475b14e50c94240156ac1123b1c1332
SHA256 ed4e4058f01be9faa0222586e0ba4817cb7f573a5ff21145698ad976dbd54b65
MD5 840039bf13bb9197b2b2cfe2ce0be458
SHA1 659200ebed37c5f2076d77bc3cf207f78a2cbb9b
SHA512 fc587d652382eed4e00f5b0506c59c97f622a579a1b125706d494d1b1c19d378f4ffe1259f98503fe988070bc457b1d465ab21eaaa55ac2bbbbf060194747ed3
SSDEEP 6144:yHHIqVq4RrfKI242vVU70b+WYimERAAI40R9TUuNVH7xmPclSp9z+kcvP3Zi53tu:yoqVq55SwKiQ4S9TXNS9zY3Zidt/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25599

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoExW GetProcessHeap EnumResourceTypesA TlsSetValue GetSystemWindowsDirectoryA LeaveCriticalSection SetConsoleCursorPosition GetFileAttributesW WriteConsoleW GetConsoleFontSize MultiByteToWideChar IsBadStringPtrA GetTempPathW lstrcmpiA GetProcAddress VirtualAlloc SetComputerNameA BuildCommDCBW GetModuleHandleW LoadLibraryA DnsHostnameToComputerNameA SetCommMask EnumDateFormatsA SetConsoleCursorInfo GetModuleHandleA FreeEnvironmentStringsW GetFileAttributesExW EndUpdateResourceA GlobalAddAtomW AddConsoleAliasA FindActCtxSectionStringW OpenFileMappingA LCMapStringW GetCurrentProcess InterlockedIncrement RemoveVectoredExceptionHandler GetConsoleOutputCP WriteConsoleA ReadFile GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile

user32

WindowFromDC

gdi32

GetCharWidthFloatA

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

TransparentBlt