file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 340KB
Sample230118-rt6ahaag89
SHA256 74c090b7659576d60eee1ffd8ebc6e565c79b338b99290afdac980dedf986c9a
MD5 261b4134182682be187d3e98a0ae875d
SHA1 55062b26550c0f9da5f111a6995cbab184f27582
SHA512 950f619b4e2c5a99ff793cabd16250050257ea40da01fce662563fc222655eb823971487350a4dc0e2a3d79a60ff85965338f62016d71dd65373f8d3010d57e6
SSDEEP 6144:sfY6rnaLG0y108hXZMgnXyCFvOPZElnyHSx2GNYh:sQ6rna5yW8pZMAXzOkTx5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH f3fd97d67ff16d15df251c98dfaa4fbf
SHA256 74c090b7659576d60eee1ffd8ebc6e565c79b338b99290afdac980dedf986c9a
MD5 261b4134182682be187d3e98a0ae875d
SHA1 55062b26550c0f9da5f111a6995cbab184f27582
SHA512 950f619b4e2c5a99ff793cabd16250050257ea40da01fce662563fc222655eb823971487350a4dc0e2a3d79a60ff85965338f62016d71dd65373f8d3010d57e6
SSDEEP 6144:sfY6rnaLG0y108hXZMgnXyCFvOPZElnyHSx2GNYh:sQ6rna5yW8pZMAXzOkTx5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20455

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW lstrlenA lstrcpynA FindResourceExW EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetTickCount ConvertFiberToThread GetWindowsDirectoryA GetGeoInfoW FindResourceExA LoadLibraryW GetCalendarInfoW DnsHostnameToComputerNameW TransactNamedPipe SetConsoleCursorPosition SetMessageWaitingIndicator SetPriorityClass LCMapStringA lstrcmpiA GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenWaitableTimerW AddAtomW CreateEventW GetCommMask SetCommMask GetModuleHandleA FreeEnvironmentStringsW BuildCommDCBA GetConsoleCursorInfo EnumCalendarInfoExA LCMapStringW CreateFileA CloseHandle GetConsoleFontSize HeapCompact WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy WriteFmtUserTypeStg

winhttp

WinHttpCheckPlatform