file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 230KB
Sample230118-j55jcahe2s
SHA256 63ee86755bb5dfe1719bd69e6fa7d580309b3bb21e2cf9a4a16ec82be1f02e3a
MD5 a94151d78a7bbd57608e8ba2ac2d2804
SHA1 eccef300b9e141af09b1943adbb74d44f1a5d3f0
SHA512 5ebff52b9ef597fd4ff3444f9f655ebb299ec8748e1a1673460344b22cde4000bce63c0f2bc63ef38e51e9a405b5b007482d44d633f53b38d30e82736f9031d0
SSDEEP 6144:j8+BLmK9Fzc0funguZuT/Zky1v4YtW1WmJSU9:w+P9TfuHuT/Zky54G8SU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 230KB

file.exe

IMPHASH c38103edb9435e2f8aa8a8056650304a
SHA256 63ee86755bb5dfe1719bd69e6fa7d580309b3bb21e2cf9a4a16ec82be1f02e3a
MD5 a94151d78a7bbd57608e8ba2ac2d2804
SHA1 eccef300b9e141af09b1943adbb74d44f1a5d3f0
SHA512 5ebff52b9ef597fd4ff3444f9f655ebb299ec8748e1a1673460344b22cde4000bce63c0f2bc63ef38e51e9a405b5b007482d44d633f53b38d30e82736f9031d0
SSDEEP 6144:j8+BLmK9Fzc0funguZuT/Zky1v4YtW1WmJSU9:w+P9TfuHuT/Zky54G8SU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23495

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA lstrcpynA InterlockedIncrement VerSetConditionMask ReadConsoleA GetConsoleAliasA GetCurrentProcess SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer GetFileAttributesExA EnumCalendarInfoExW ConvertFiberToThread GetGeoInfoW GetSystemWow64DirectoryA FindResourceExA LoadLibraryW GetCalendarInfoW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW TransactNamedPipe SetConsoleCursorPosition SetMessageWaitingIndicator SetPriorityClass IsBadStringPtrA LCMapStringA lstrcmpiA GetProcAddress FindVolumeMountPointClose VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA FreeEnvironmentStringsW BuildCommDCBA GetConsoleCursorInfo EndUpdateResourceA GlobalAddAtomW LCMapStringW CreateFileA CloseHandle GetConsoleFontSize HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogW

ole32

WriteFmtUserTypeStg CoRegisterMallocSpy

winhttp

WinHttpSetOption WinHttpCheckPlatform