file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 340KB
Sample230118-qs1g7aec6x
SHA256 acdbfb269a839c19015bdea41b7f37cd64b472a82ee4b740cdc6f6178690f94f
MD5 cb6529eb104fba9e2b849d391244055d
SHA1 7d166f128f394f7d3049aa364a68cadd84f38a3a
SHA512 77362b118eaa8a75deb5a4054b2b765e998625fd567a4e1f6e2fbb0587c74e63a3d79429be7995eb6c1e68c61745306224f208460731636aa779bb5b11ede10a
SSDEEP 6144:W+x6nNcLS6sR+/m8tLgvVwPW4ktMo4OPZElnyHSYogJYh:hx6nNcbsk/VV4wPWLB4OkTpK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH f3fd97d67ff16d15df251c98dfaa4fbf
SHA256 acdbfb269a839c19015bdea41b7f37cd64b472a82ee4b740cdc6f6178690f94f
MD5 cb6529eb104fba9e2b849d391244055d
SHA1 7d166f128f394f7d3049aa364a68cadd84f38a3a
SHA512 77362b118eaa8a75deb5a4054b2b765e998625fd567a4e1f6e2fbb0587c74e63a3d79429be7995eb6c1e68c61745306224f208460731636aa779bb5b11ede10a
SSDEEP 6144:W+x6nNcLS6sR+/m8tLgvVwPW4ktMo4OPZElnyHSYogJYh:hx6nNcbsk/VV4wPWLB4OkTpK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20455

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW lstrlenA lstrcpynA FindResourceExW EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetTickCount ConvertFiberToThread GetWindowsDirectoryA GetGeoInfoW FindResourceExA LoadLibraryW GetCalendarInfoW DnsHostnameToComputerNameW TransactNamedPipe SetConsoleCursorPosition SetMessageWaitingIndicator SetPriorityClass LCMapStringA lstrcmpiA GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW AddAtomW CreateEventW GetCommMask SetCommMask GetModuleHandleA FreeEnvironmentStringsW BuildCommDCBA GetConsoleCursorInfo EnumCalendarInfoExA LCMapStringW CreateFileA CloseHandle GetConsoleFontSize HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy WriteFmtUserTypeStg

winhttp

WinHttpCheckPlatform