file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 229KB
Sample230117-df6gfshd38
SHA256 4e6daab832250f986b45eea1f814651b68ec3c69ade8c16a3482542cfdc8e4c8
MD5 b913dc961bd98c9a1ec457f3d7259bfd
SHA1 4deddd46c835849da8325e504a069eaac234a92b
SHA512 d41ae928fd0ef89722cf758e8e2d11bb8835377fb433f5b9569d25b15735014850a440f54388ae5936631c3586803831e9ac6c6f2bbe73395bb4539d160aecbb
SSDEEP 3072:JHZtg9ziLw7Ypsbr4XDdcHbzxGtWLIH767nwviuAmqJw3yIlFPbnDKyQ/uy0:ZZy92Lzs/4WXYgE76DMbAmqkhPbnDHX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 229KB

file.exe

IMPHASH 6ff4661f5ac7277e97a6aebb3747ee16
SHA256 4e6daab832250f986b45eea1f814651b68ec3c69ade8c16a3482542cfdc8e4c8
MD5 b913dc961bd98c9a1ec457f3d7259bfd
SHA1 4deddd46c835849da8325e504a069eaac234a92b
SHA512 d41ae928fd0ef89722cf758e8e2d11bb8835377fb433f5b9569d25b15735014850a440f54388ae5936631c3586803831e9ac6c6f2bbe73395bb4539d160aecbb
SSDEEP 3072:JHZtg9ziLw7Ypsbr4XDdcHbzxGtWLIH767nwviuAmqJw3yIlFPbnDKyQ/uy0:ZZy92Lzs/4WXYgE76DMbAmqkhPbnDHX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetGeoInfoW GetSystemWow64DirectoryA WideCharToMultiByte LoadLibraryW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize IsBadStringPtrA SetPriorityClass GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA BuildCommDCBA VirtualProtect EnumDateFormatsW EndUpdateResourceA GlobalAddAtomW LCMapStringW CreateFileA CloseHandle lstrcmpiA HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogW

ole32

CoRegisterMallocSpy

winhttp

WinHttpSetOption