file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 415KB
Sample230113-kfvhhsbd3s
SHA256 255c330c534da222b320eaa69869b5c97dca6917cab6344da2d8e8f22b61d10a
MD5 bfe93d533bdabe29640851b0e84a08fb
SHA1 2f4f629107fabcbcf13cc372d327c52d133c5d9d
SHA512 4f4a25606c97d3cfbaaa4749825c7ccb411524487d825a56ebdd93a0e682da0a6098d6769daaef0189f3420b0ad34bec43300c5733cdc6b288e59d32d74d504a
SSDEEP 6144:rgYLNfwRmuv9OeaV/t3KYT2niisjCdkSeduBr/vuZzxEmXCgyGQ:rgYZfwRLkeaV/NoLdk5gzmZznS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 415KB

file.exe

IMPHASH e726521541cc92e5028942e54567f36d
SHA256 255c330c534da222b320eaa69869b5c97dca6917cab6344da2d8e8f22b61d10a
MD5 bfe93d533bdabe29640851b0e84a08fb
SHA1 2f4f629107fabcbcf13cc372d327c52d133c5d9d
SHA512 4f4a25606c97d3cfbaaa4749825c7ccb411524487d825a56ebdd93a0e682da0a6098d6769daaef0189f3420b0ad34bec43300c5733cdc6b288e59d32d74d504a
SSDEEP 6144:rgYLNfwRmuv9OeaV/t3KYT2niisjCdkSeduBr/vuZzxEmXCgyGQ:rgYZfwRLkeaV/NoLdk5gzmZznS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27598

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetCurrentProcess SetComputerNameW GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW FindActCtxSectionStringA TlsSetValue SetSystemTimeAdjustment GetSystemWindowsDirectoryA LeaveCriticalSection GetConsoleAliasW GetFileAttributesW GetGeoInfoA MultiByteToWideChar IsBadStringPtrA EndUpdateResourceW lstrcmpiA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA OpenWaitableTimerW DnsHostnameToComputerNameA SetCommMask SetConsoleCursorInfo FreeEnvironmentStringsW BuildCommDCBA EnumDateFormatsW GetTempPathA OpenFileMappingA GetConsoleSelectionInfo LCMapStringW FindResourceExW GlobalAddAtomA FlushInstructionCache UnregisterWait CreateFileA CloseHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapSize HeapFree TerminateProcess IsDebuggerPresent EnterCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetModuleHandleA HeapReAlloc RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle GetConsoleOutputCP

user32

GetDC

gdi32

GetCharWidthA

advapi32

ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend