file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 229KB
Sample230117-bxdfwsce4z
SHA256 6dd09f36f97b6858dfdd15db6c3009ba9a5faa59d5fa059f2b814c3e999e8fdd
MD5 e3ba3c6c14ac50ac88f151b167f2e091
SHA1 2b5d616498e39a1389bc38d26081de2930ac9683
SHA512 5cbc95eb46a5e506931ff889e3eeb3758c723d1a7b486b42ffeb474182979ac65d28afa9dd5f274401bc1d0b193a02cbb20c5e998794ff781c35442652cf6c3e
SSDEEP 3072:4HZtgMJJLg7Ypskr4XDdcHSP5OD82wsrexVLQEb4FPXDKyQ/uy0:WZyMrLDsm4W25jbFHLQEsFPXDHX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 6ff4661f5ac7277e97a6aebb3747ee16
SHA256 6dd09f36f97b6858dfdd15db6c3009ba9a5faa59d5fa059f2b814c3e999e8fdd
MD5 e3ba3c6c14ac50ac88f151b167f2e091
SHA1 2b5d616498e39a1389bc38d26081de2930ac9683
SHA512 5cbc95eb46a5e506931ff889e3eeb3758c723d1a7b486b42ffeb474182979ac65d28afa9dd5f274401bc1d0b193a02cbb20c5e998794ff781c35442652cf6c3e
SSDEEP 3072:4HZtgMJJLg7Ypskr4XDdcHSP5OD82wsrexVLQEb4FPXDKyQ/uy0:WZyMrLDsm4W25jbFHLQEsFPXDHX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetGeoInfoW GetSystemWow64DirectoryA WideCharToMultiByte LoadLibraryW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize IsBadStringPtrA SetPriorityClass GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA BuildCommDCBA VirtualProtect EnumDateFormatsW EndUpdateResourceA GlobalAddAtomW LCMapStringW CreateFileA CloseHandle lstrcmpiA HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogW

ole32

CoRegisterMallocSpy

winhttp

WinHttpSetOption