file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 321KB
Sample230112-ge513sbb2s
SHA256 2b1f1409b8dc56883da2f93bc186cfef4590a69fe0d5a55223c111326d2d900b
MD5 150ded99baac5cd7c1b3807cc387e3a4
SHA1 e9918145e92ad409ab9ef5b3f1cb506dfde1767a
SHA512 4b359508683afa2658ae308e7cde45bab09e41462925254d7e4e3aff63284a3f6d68dec939ee75431f7096213c3424ac423ac6e1fdecc666d0ee95b2d0af88d9
SSDEEP 3072:yXOLgoMvh5GBzn5dYCu/EWtFFIO82Sop+bjQkaVXRdF8M/WhJsh3+DV0DBKmZQs:yKqSzju/ESHIO8QPkydO6WUUFg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 321KB

file.exe

IMPHASH dc61e0c6faeada0c00413a0a116aa87d
SHA256 2b1f1409b8dc56883da2f93bc186cfef4590a69fe0d5a55223c111326d2d900b
MD5 150ded99baac5cd7c1b3807cc387e3a4
SHA1 e9918145e92ad409ab9ef5b3f1cb506dfde1767a
SHA512 4b359508683afa2658ae308e7cde45bab09e41462925254d7e4e3aff63284a3f6d68dec939ee75431f7096213c3424ac423ac6e1fdecc666d0ee95b2d0af88d9
SSDEEP 3072:yXOLgoMvh5GBzn5dYCu/EWtFFIO82Sop+bjQkaVXRdF8M/WhJsh3+DV0DBKmZQs:yKqSzju/ESHIO8QPkydO6WUUFg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25567

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW FindActCtxSectionStringA TlsSetValue GetSystemWindowsDirectoryA LeaveCriticalSection DnsHostnameToComputerNameW GetConsoleAliasW GetFileAttributesW MultiByteToWideChar IsBadStringPtrA lstrcmpiA GetProcAddress InterlockedIncrement SetComputerNameA LoadLibraryA WriteConsoleA SetCommMask SetConsoleCursorInfo FreeEnvironmentStringsW BuildCommDCBA EnumDateFormatsW GetFileAttributesExW EndUpdateResourceA GlobalAddAtomW AddConsoleAliasA GetTempPathA OpenFileMappingA GetConsoleSelectionInfo LCMapStringW RemoveVectoredExceptionHandler FindResourceExW VirtualAlloc UnregisterWait WriteConsoleW GetConsoleOutputCP ReadFile GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile

user32

GetDC

gdi32

GetCharWidthA

advapi32

ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend