file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 228KB
Sample230117-e5dcmsac67
SHA256 2f76e575a3829e98c908ea72ebd944892efdfe5818e074b8824ba6d9a657de93
MD5 e0b6df52f5115a679d43cacf397971fc
SHA1 dc3d4827cbaffac09e4f512dbf6133cb00652495
SHA512 9b639caf108a721bca55931b04c52e392aab5d817e424c3515983e5c6a324c9f8313e97e740539794759d9d6a11f14218ff791bada36e3daf2e7a8dff8fd1037
SSDEEP 3072:ZHZAgB/uLE7M98Xz4XDdcHuyJsUdaprvznzgqsGwMyXAUPyTXs4otDKyQ/uy0:pZDBWL/8D4WhJxapTGGwMyLPyY4uDHX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 228KB

file.exe

IMPHASH 6ff4661f5ac7277e97a6aebb3747ee16
SHA256 2f76e575a3829e98c908ea72ebd944892efdfe5818e074b8824ba6d9a657de93
MD5 e0b6df52f5115a679d43cacf397971fc
SHA1 dc3d4827cbaffac09e4f512dbf6133cb00652495
SHA512 9b639caf108a721bca55931b04c52e392aab5d817e424c3515983e5c6a324c9f8313e97e740539794759d9d6a11f14218ff791bada36e3daf2e7a8dff8fd1037
SSDEEP 3072:ZHZAgB/uLE7M98Xz4XDdcHuyJsUdaprvznzgqsGwMyXAUPyTXs4otDKyQ/uy0:pZDBWL/8D4WhJxapTGGwMyLPyY4uDHX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW InterlockedIncrement ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetGeoInfoW GetSystemWow64DirectoryA WideCharToMultiByte LoadLibraryW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW SetMessageWaitingIndicator GetConsoleFontSize IsBadStringPtrA SetPriorityClass GetProcAddress FindVolumeMountPointClose VirtualAlloc EnterCriticalSection OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA BuildCommDCBA VirtualProtect EnumDateFormatsW EndUpdateResourceA GlobalAddAtomW LCMapStringW CreateFileA CloseHandle lstrcmpiA HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogW

ole32

CoRegisterMallocSpy

winhttp

WinHttpSetOption