file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 359KB
Sample230118-mkdfxafa26
SHA256 bc28dc7b76722bfa1b71502a22fb93519c24ce8df1220e27143ff70049c09ff4
MD5 e55352a20b5ae2e89b4d9c581082f450
SHA1 0dd67624c155c2adb19a5a59fcd6b41d7d878b8c
SHA512 d7f45265a61b5152e907f06bcc22915518cbef0f22dc6dffea6dec6b3db620e8b842a1e299a76ee5c200bc7489049b91d66ab081ce945adc0b3d7d5eb8f5c8c3
SSDEEP 6144:oLE61Q8I5ZpfaPL7/2P7srObfWo0/rishRZVDQSU9:ow62zLpsAsrMOXOyDQSU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 359KB

file.exe

IMPHASH a2019601f64826cd01ff25711cf48786
SHA256 bc28dc7b76722bfa1b71502a22fb93519c24ce8df1220e27143ff70049c09ff4
MD5 e55352a20b5ae2e89b4d9c581082f450
SHA1 0dd67624c155c2adb19a5a59fcd6b41d7d878b8c
SHA512 d7f45265a61b5152e907f06bcc22915518cbef0f22dc6dffea6dec6b3db620e8b842a1e299a76ee5c200bc7489049b91d66ab081ce945adc0b3d7d5eb8f5c8c3
SSDEEP 6144:oLE61Q8I5ZpfaPL7/2P7srObfWo0/rishRZVDQSU9:ow62zLpsAsrMOXOyDQSU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20743

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW lstrlenA lstrcpynA FindResourceExW InterlockedIncrement VerSetConditionMask ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA EnumCalendarInfoExW ConvertFiberToThread GetGeoInfoW FindResourceExA LoadLibraryW GetCalendarInfoW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW TransactNamedPipe SetConsoleCursorPosition SetPriorityClass GetConsoleFontSize LCMapStringA lstrcmpiA GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA FreeEnvironmentStringsW BuildCommDCBA GetConsoleCursorInfo EndUpdateResourceA GetWindowsDirectoryW GlobalAddAtomW LCMapStringW CreateFileA CloseHandle SetMessageWaitingIndicator HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy WriteFmtUserTypeStg

winhttp

WinHttpCheckPlatform