file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 415KB
Sample230113-lhl5labf6t
SHA256 3241f9d0afe18cee4130a8dabbfc9eda8d667febe7e85c8aeb59d4b523133b9d
MD5 6b33d845acf7d6ae5c023024d06bb058
SHA1 3f9f014dd5d2107020f5ee1a813a2e3a30b64da6
SHA512 bb4f8c6ff405166db1fc87c3ee1956dbc45ba9cc31e7ac583a0e54b55c0f97eef1481e9036c4d050e454f3c3ff45c16dda77890ae72008a79c16919b30265c72
SSDEEP 6144:4ZuLY2mKAYfsMCscmXRX/2gj4MQmzoQXEaqO/GSHER/vuZzxEmXCgyGgc:4ZuU2mKAEsMC1+e7Mf6cz0mZznS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 415KB

file.exe

IMPHASH e726521541cc92e5028942e54567f36d
SHA256 3241f9d0afe18cee4130a8dabbfc9eda8d667febe7e85c8aeb59d4b523133b9d
MD5 6b33d845acf7d6ae5c023024d06bb058
SHA1 3f9f014dd5d2107020f5ee1a813a2e3a30b64da6
SHA512 bb4f8c6ff405166db1fc87c3ee1956dbc45ba9cc31e7ac583a0e54b55c0f97eef1481e9036c4d050e454f3c3ff45c16dda77890ae72008a79c16919b30265c72
SSDEEP 6144:4ZuLY2mKAYfsMCscmXRX/2gj4MQmzoQXEaqO/GSHER/vuZzxEmXCgyGgc:4ZuU2mKAEsMC1+e7Mf6cz0mZznS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27598

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetCurrentProcess SetComputerNameW GetFileAttributesExA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW FindActCtxSectionStringA TlsSetValue SetSystemTimeAdjustment GetSystemWindowsDirectoryA LeaveCriticalSection GetConsoleAliasW GetFileAttributesW GetGeoInfoA MultiByteToWideChar IsBadStringPtrA EndUpdateResourceW lstrcmpiA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA OpenWaitableTimerW DnsHostnameToComputerNameA SetCommMask SetConsoleCursorInfo FreeEnvironmentStringsW BuildCommDCBA EnumDateFormatsW GetTempPathA OpenFileMappingA GetConsoleSelectionInfo LCMapStringW FindResourceExW GlobalAddAtomA FlushInstructionCache UnregisterWait CreateFileA CloseHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapSize HeapFree TerminateProcess IsDebuggerPresent EnterCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetModuleHandleA HeapReAlloc RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle GetConsoleOutputCP

user32

GetDC

gdi32

GetCharWidthA

advapi32

ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend