file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 362KB
Sample230118-jcdj6agg6z
SHA256 f3f16f89e812ed5c799c4f65264ebab22cf132ec4c21c55b032e56b29429af19
MD5 315290877fc59e478dbfe73ac373f28f
SHA1 be4f52332323490684cdd501e5de551631f8ecee
SHA512 19aa7253c793ed28451f30e1e7ac71df59c243e55dce91299592d61f8b3af7d75cea602b22d1368279d0ab8d8b911bfa1bb45d069d9868047d4f4ab86cf25ba8
SSDEEP 6144:nNnLVGAHJ6Pzl3Is5BjrureEdEANB9p1abXAYEa2R/NSU9:nxoApOSgMp7B316XxEa2R/NSU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 362KB

file.exe

IMPHASH c38103edb9435e2f8aa8a8056650304a
SHA256 f3f16f89e812ed5c799c4f65264ebab22cf132ec4c21c55b032e56b29429af19
MD5 315290877fc59e478dbfe73ac373f28f
SHA1 be4f52332323490684cdd501e5de551631f8ecee
SHA512 19aa7253c793ed28451f30e1e7ac71df59c243e55dce91299592d61f8b3af7d75cea602b22d1368279d0ab8d8b911bfa1bb45d069d9868047d4f4ab86cf25ba8
SSDEEP 6144:nNnLVGAHJ6Pzl3Is5BjrureEdEANB9p1abXAYEa2R/NSU9:nxoApOSgMp7B316XxEa2R/NSU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23495

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA lstrcpynA InterlockedIncrement VerSetConditionMask ReadConsoleA GetConsoleAliasA GetCurrentProcess SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer GetFileAttributesExA EnumCalendarInfoExW ConvertFiberToThread GetGeoInfoW GetSystemWow64DirectoryA FindResourceExA LoadLibraryW GetCalendarInfoW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW TransactNamedPipe SetConsoleCursorPosition SetMessageWaitingIndicator SetPriorityClass IsBadStringPtrA LCMapStringA lstrcmpiA GetProcAddress FindVolumeMountPointClose VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA FreeEnvironmentStringsW BuildCommDCBA GetConsoleCursorInfo EndUpdateResourceA GlobalAddAtomW LCMapStringW CreateFileA CloseHandle GetConsoleFontSize HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogW

ole32

WriteFmtUserTypeStg CoRegisterMallocSpy

winhttp

WinHttpSetOption WinHttpCheckPlatform