file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 228KB
Sample230117-ak2ghsbf8t
SHA256 5e5efa64043c65299af19bfa52d961c8c7d0b044e2ef1eeedda65f021532c11e
MD5 54506bea8fd6b432e7854a84bebf97d2
SHA1 735d3d95ec20b3909c51586595cb95b910a741e4
SHA512 b2a4168e58937377f952445bb2fcdb923af10a97772a90f331c45fbdd9a0ad6f60f1ee17ddf5554644275c2f2bd3e164205c5616be29aee310f55961988cddb5
SSDEEP 3072:/HZ0gBDlLQ7to53QFXDdcHy+VU4rmtjETq1+ashvMKpHDKyQ/uyA:/Z3BRL75AFWyw/65ETq1TWvTpHDHX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 6ff4661f5ac7277e97a6aebb3747ee16
SHA256 5e5efa64043c65299af19bfa52d961c8c7d0b044e2ef1eeedda65f021532c11e
MD5 54506bea8fd6b432e7854a84bebf97d2
SHA1 735d3d95ec20b3909c51586595cb95b910a741e4
SHA512 b2a4168e58937377f952445bb2fcdb923af10a97772a90f331c45fbdd9a0ad6f60f1ee17ddf5554644275c2f2bd3e164205c5616be29aee310f55961988cddb5
SSDEEP 3072:/HZ0gBDlLQ7to53QFXDdcHy+VU4rmtjETq1+ashvMKpHDKyQ/uyA:/Z3BRL75AFWyw/65ETq1TWvTpHDHX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetGeoInfoW GetSystemWow64DirectoryA WideCharToMultiByte LoadLibraryW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize IsBadStringPtrA SetPriorityClass GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA BuildCommDCBA VirtualProtect EnumDateFormatsW EndUpdateResourceA GlobalAddAtomW LCMapStringW CreateFileA CloseHandle lstrcmpiA HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogW

ole32

CoRegisterMallocSpy

winhttp

WinHttpSetOption