file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 321KB
Sample230112-ce1ddaag8v
SHA256 4a19e146ebc366aa46b5f94c1c27c8469cbbb39882ddb13b22c827ed30cc8a89
MD5 9a2069b9fc135d3861a8612cb49e4101
SHA1 30de675436495756d9f85d7ae129a8a2423108a9
SHA512 24f794eecd7c7c04a4b70916c5d23a0a502a4766166cb1c47088e093c50b1754ea76b1c7ec28d1e17bffa3a9905b085220ef3c42d5b7c374e541521028b907b0
SSDEEP 3072:HXOmZSqT/oLBFK5e7rfKSElv+Dp1ZHUtxYOAiUy+dF8M/WhJsh6VhXBKmZQs:3Y8oF5yS+qTZHUtz8dO6W0g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 321KB

file.exe

IMPHASH dc61e0c6faeada0c00413a0a116aa87d
SHA256 4a19e146ebc366aa46b5f94c1c27c8469cbbb39882ddb13b22c827ed30cc8a89
MD5 9a2069b9fc135d3861a8612cb49e4101
SHA1 30de675436495756d9f85d7ae129a8a2423108a9
SHA512 24f794eecd7c7c04a4b70916c5d23a0a502a4766166cb1c47088e093c50b1754ea76b1c7ec28d1e17bffa3a9905b085220ef3c42d5b7c374e541521028b907b0
SSDEEP 3072:HXOmZSqT/oLBFK5e7rfKSElv+Dp1ZHUtxYOAiUy+dF8M/WhJsh6VhXBKmZQs:3Y8oF5yS+qTZHUtz8dO6W0g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25567

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW FindActCtxSectionStringA TlsSetValue GetSystemWindowsDirectoryA LeaveCriticalSection DnsHostnameToComputerNameW GetConsoleAliasW GetFileAttributesW MultiByteToWideChar IsBadStringPtrA lstrcmpiA GetProcAddress InterlockedIncrement SetComputerNameA LoadLibraryA WriteConsoleA SetCommMask SetConsoleCursorInfo FreeEnvironmentStringsW BuildCommDCBA EnumDateFormatsW GetFileAttributesExW EndUpdateResourceA GlobalAddAtomW AddConsoleAliasA GetTempPathA OpenFileMappingA GetConsoleSelectionInfo LCMapStringW RemoveVectoredExceptionHandler FindResourceExW VirtualAlloc UnregisterWait WriteConsoleW GetConsoleOutputCP ReadFile GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile

user32

GetDC

gdi32

GetCharWidthA

advapi32

ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend