file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 283KB
Sample230113-pp2qeagh39
SHA256 ebc0efd310c2fe77b39a990c97c963bf0ec79772c5e5bca3caa465fd9043ac19
MD5 76422d6db54fa697603e60a9716d0752
SHA1 f7e8b0b83daa97201939b66e05188f114449bba3
SHA512 0446d5abb615398f5cd72b15c862453c00039991edf24ef1a0eedc19d24cdc9c33bb7197fbe3b7bb95c043c37a594bd0f63aff0e44a63a378faed3664d4519d6
SSDEEP 6144:J4f0DjLNuiWkDsYjPVXbc61BRoBSE3MjSlJZ9tzrSA3O6M:JY0Djxuir5TVrc61boDZ9P3Or
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 283KB

file.exe

IMPHASH 2abc882d899e2b43011c6fa1977c4a07
SHA256 ebc0efd310c2fe77b39a990c97c963bf0ec79772c5e5bca3caa465fd9043ac19
MD5 76422d6db54fa697603e60a9716d0752
SHA1 f7e8b0b83daa97201939b66e05188f114449bba3
SHA512 0446d5abb615398f5cd72b15c862453c00039991edf24ef1a0eedc19d24cdc9c33bb7197fbe3b7bb95c043c37a594bd0f63aff0e44a63a378faed3664d4519d6
SSDEEP 6144:J4f0DjLNuiWkDsYjPVXbc61BRoBSE3MjSlJZ9tzrSA3O6M:JY0Djxuir5TVrc61boDZ9P3Or
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29847

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait IsBadStringPtrW FindResourceExW GlobalAddAtomA EndUpdateResourceW InterlockedIncrement GetCurrentProcess SetComputerNameW FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW FindActCtxSectionStringA TlsSetValue SetSystemTimeAdjustment GetSystemWindowsDirectoryA LeaveCriticalSection GetFileAttributesA GetConsoleAliasW GetGeoInfoA MultiByteToWideChar FlushInstructionCache GetProcAddress VirtualAlloc LoadLibraryA OpenWaitableTimerW DnsHostnameToComputerNameA SetCommMask SetConsoleCursorInfo lstrcmpiW BuildCommDCBA EnumDateFormatsW GetFileAttributesExW GetTempPathA OpenFileMappingA GetConsoleSelectionInfo LCMapStringW CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle WideCharToMultiByte InterlockedDecrement InterlockedExchange Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetDC

ole32

CoRegisterMallocSpy

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend