file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 341KB
Sample230118-pql2cagg74
SHA256 b57dfe8cc05c7efba003e622306d5ccaa1678e2e3f4553d869135b4a2c514a6e
MD5 d9caf346264f7072e97e9bf2fb786de1
SHA1 a548ea8c2facaa0e730038abff42fead805bdd1e
SHA512 1148ce17615c72da45fe91d2366d71b8f9eeaee90d65cc1af064ad081255cc0d069cd61fb36f479f159d5746e372c288f826f057520ed5c63d1997634136a619
SSDEEP 3072:7oh6ULBORP3wYD0Mq6Xav6USkbRh9IBDUniAPsnucnkvsnu1OxXS7+9j92doCd1y:QLOfQ762Tqgipucka4OxXSU92d1d1Le
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 341KB

file.exe

IMPHASH a2019601f64826cd01ff25711cf48786
SHA256 b57dfe8cc05c7efba003e622306d5ccaa1678e2e3f4553d869135b4a2c514a6e
MD5 d9caf346264f7072e97e9bf2fb786de1
SHA1 a548ea8c2facaa0e730038abff42fead805bdd1e
SHA512 1148ce17615c72da45fe91d2366d71b8f9eeaee90d65cc1af064ad081255cc0d069cd61fb36f479f159d5746e372c288f826f057520ed5c63d1997634136a619
SSDEEP 3072:7oh6ULBORP3wYD0Mq6Xav6USkbRh9IBDUniAPsnucnkvsnu1OxXS7+9j92doCd1y:QLOfQ762Tqgipucka4OxXSU92d1d1Le
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20759

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW lstrlenA lstrcpynA FindResourceExW InterlockedIncrement VerSetConditionMask ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetFileAttributesExA EnumCalendarInfoExW ConvertFiberToThread GetGeoInfoW FindResourceExA LoadLibraryW GetCalendarInfoW SetSystemTimeAdjustment CreateEventA DnsHostnameToComputerNameW TransactNamedPipe SetConsoleCursorPosition SetPriorityClass GetConsoleFontSize LCMapStringA lstrcmpiA GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW GetCommMask SetCommMask GetModuleHandleA FreeEnvironmentStringsW BuildCommDCBA GetConsoleCursorInfo EndUpdateResourceA GetWindowsDirectoryW GlobalAddAtomW LCMapStringW CreateFileA CloseHandle SetMessageWaitingIndicator HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind RaiseException GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy WriteFmtUserTypeStg

winhttp

WinHttpCheckPlatform