file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 321KB
Sample230112-dhbpvsfa44
SHA256 ff9bcbe4a1dcfdb1bd6647cf1ddb13881adb72891452929feeb9ff0e941b4313
MD5 b5951775d1ab8f062a15a35aa00e39f5
SHA1 655b5c8c902e4c9824dcb01b990f394751848263
SHA512 488680478b5b676ef87a88aafe3aa0a7a261ddabdbb0b48b859d76d7b9ce651c26a88db748411ccc377b39bbcf7b1292b1930544e2c643f2108fe681e1c6d907
SSDEEP 3072:pXO3nGZ7hlDeIsh56bEBaOUK9V18JyfXWs1Cy28+8RTsdF8M/WhJshXDhXGyitBp:NF1ZsmbY1UK9kyfGr78R4dO6Wm1yGg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 321KB

file.exe

IMPHASH dc61e0c6faeada0c00413a0a116aa87d
SHA256 ff9bcbe4a1dcfdb1bd6647cf1ddb13881adb72891452929feeb9ff0e941b4313
MD5 b5951775d1ab8f062a15a35aa00e39f5
SHA1 655b5c8c902e4c9824dcb01b990f394751848263
SHA512 488680478b5b676ef87a88aafe3aa0a7a261ddabdbb0b48b859d76d7b9ce651c26a88db748411ccc377b39bbcf7b1292b1930544e2c643f2108fe681e1c6d907
SSDEEP 3072:pXO3nGZ7hlDeIsh56bEBaOUK9V18JyfXWs1Cy28+8RTsdF8M/WhJshXDhXGyitBp:NF1ZsmbY1UK9kyfGr78R4dO6Wm1yGg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25567

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW FindActCtxSectionStringA TlsSetValue GetSystemWindowsDirectoryA LeaveCriticalSection DnsHostnameToComputerNameW GetConsoleAliasW GetFileAttributesW MultiByteToWideChar IsBadStringPtrA lstrcmpiA GetProcAddress InterlockedIncrement SetComputerNameA LoadLibraryA WriteConsoleA SetCommMask SetConsoleCursorInfo FreeEnvironmentStringsW BuildCommDCBA EnumDateFormatsW GetFileAttributesExW EndUpdateResourceA GlobalAddAtomW AddConsoleAliasA GetTempPathA OpenFileMappingA GetConsoleSelectionInfo LCMapStringW RemoveVectoredExceptionHandler FindResourceExW VirtualAlloc UnregisterWait WriteConsoleW GetConsoleOutputCP ReadFile GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile

user32

GetDC

gdi32

GetCharWidthA

advapi32

ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend