file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 453KB
Sample230112-fn4zpsfb97
SHA256 aeec9c9f101ce1c08b1ef9ddca2a1e03b11c9539f3a5649ea56bb0180cf65ffc
MD5 1c331bb91d03a236ee0dbaf8981c5e69
SHA1 caeea98151fdff51489c5d329340ffc4f9af244e
SHA512 ccfd301d3b956162855d6679f75292daacb1ef53305e53aca8d80c52b5dd52c6f5b4df5856b58419128ec952e6b3bab735bb997b7e4f5e52577fffdbb2b9e490
SSDEEP 6144:HsVtGM20G174K0gBTlMNbzDGlTihoA2I4khXjQ7O6WatGg:HsGM208pLTKfDxx2WN6W
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 453KB

file.exe

IMPHASH dc61e0c6faeada0c00413a0a116aa87d
SHA256 aeec9c9f101ce1c08b1ef9ddca2a1e03b11c9539f3a5649ea56bb0180cf65ffc
MD5 1c331bb91d03a236ee0dbaf8981c5e69
SHA1 caeea98151fdff51489c5d329340ffc4f9af244e
SHA512 ccfd301d3b956162855d6679f75292daacb1ef53305e53aca8d80c52b5dd52c6f5b4df5856b58419128ec952e6b3bab735bb997b7e4f5e52577fffdbb2b9e490
SSDEEP 6144:HsVtGM20G174K0gBTlMNbzDGlTihoA2I4khXjQ7O6WatGg:HsGM208pLTKfDxx2WN6W
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25567

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW FindActCtxSectionStringA TlsSetValue GetSystemWindowsDirectoryA LeaveCriticalSection DnsHostnameToComputerNameW GetConsoleAliasW GetFileAttributesW MultiByteToWideChar IsBadStringPtrA lstrcmpiA GetProcAddress InterlockedIncrement SetComputerNameA LoadLibraryA WriteConsoleA SetCommMask SetConsoleCursorInfo FreeEnvironmentStringsW BuildCommDCBA EnumDateFormatsW GetFileAttributesExW EndUpdateResourceA GlobalAddAtomW AddConsoleAliasA GetTempPathA OpenFileMappingA GetConsoleSelectionInfo LCMapStringW RemoveVectoredExceptionHandler FindResourceExW VirtualAlloc UnregisterWait WriteConsoleW GetConsoleOutputCP ReadFile GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile

user32

GetDC

gdi32

GetCharWidthA

advapi32

ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend