file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 414KB
Sample230113-jcdvxsfc25
SHA256 f6ca1a1d18dc169801490f33db3080a5f17fdaaec78b3d99f9fb6d60e2dfdc30
MD5 7349ec2f080e9195582e2f28169667b9
SHA1 9db7c5fdc40c7de89c41520af54e1d9413a4a6aa
SHA512 ef801ed6e9124bfce83e9add362d6a5c4fe5c03b4153aab7e7b6026c1183cccf8d4c4b340e19a196a6c0245875319a8305ca3dc3051441d8a66d32e95598fc09
SSDEEP 12288:0pYA7IBg6+x718MENoRa+02aN9K1rXttVGlmZznS:CY3Bip8MUFbNA1rtYmZ7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 414KB

file.exe

IMPHASH e726521541cc92e5028942e54567f36d
SHA256 f6ca1a1d18dc169801490f33db3080a5f17fdaaec78b3d99f9fb6d60e2dfdc30
MD5 7349ec2f080e9195582e2f28169667b9
SHA1 9db7c5fdc40c7de89c41520af54e1d9413a4a6aa
SHA512 ef801ed6e9124bfce83e9add362d6a5c4fe5c03b4153aab7e7b6026c1183cccf8d4c4b340e19a196a6c0245875319a8305ca3dc3051441d8a66d32e95598fc09
SSDEEP 12288:0pYA7IBg6+x718MENoRa+02aN9K1rXttVGlmZznS:CY3Bip8MUFbNA1rtYmZ7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27598

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetCurrentProcess SetComputerNameW GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW FindActCtxSectionStringA TlsSetValue SetSystemTimeAdjustment GetSystemWindowsDirectoryA LeaveCriticalSection GetConsoleAliasW GetFileAttributesW GetGeoInfoA MultiByteToWideChar IsBadStringPtrA EndUpdateResourceW lstrcmpiA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA OpenWaitableTimerW DnsHostnameToComputerNameA SetCommMask SetConsoleCursorInfo FreeEnvironmentStringsW BuildCommDCBA EnumDateFormatsW GetTempPathA OpenFileMappingA GetConsoleSelectionInfo LCMapStringW FindResourceExW GlobalAddAtomA FlushInstructionCache UnregisterWait CreateFileA CloseHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapSize HeapFree TerminateProcess IsDebuggerPresent EnterCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetModuleHandleA HeapReAlloc RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle GetConsoleOutputCP

user32

GetDC

gdi32

GetCharWidthA

advapi32

ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend