file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 458KB
Sample230118-xn824afe69
SHA256 38afbc98f418bfb4feeb210af9ac226dc88495c99c6127d367bfe33e98090dc7
MD5 f1ca9a07e96835a0393635001bd0e58a
SHA1 3828765d069c58e9dd782514e17980d7a976acd4
SHA512 b088b174a32f56fdea4c017923e4117617e638734975d087ee35ad1ad99e3c41ee8227c19b30098b6f4f5d4059aa7f4966e9462ba79477873075177b4891d888
SSDEEP 12288:M2+lG61lHgoqqT7TDoTiTdFWhAsjJkQUOkTG:M261OPUUTZmKWQRkTG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 458KB

file.exe

IMPHASH 1813a25ed67d368f05cf7b0ca649b9df
SHA256 38afbc98f418bfb4feeb210af9ac226dc88495c99c6127d367bfe33e98090dc7
MD5 f1ca9a07e96835a0393635001bd0e58a
SHA1 3828765d069c58e9dd782514e17980d7a976acd4
SHA512 b088b174a32f56fdea4c017923e4117617e638734975d087ee35ad1ad99e3c41ee8227c19b30098b6f4f5d4059aa7f4966e9462ba79477873075177b4891d888
SSDEEP 12288:M2+lG61lHgoqqT7TDoTiTdFWhAsjJkQUOkTG:M261OPUUTZmKWQRkTG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20013

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW lstrlenA lstrcpynA FindResourceExW EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetTickCount ConvertFiberToThread GetWindowsDirectoryA GetGeoInfoW FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW DnsHostnameToComputerNameW TransactNamedPipe SetConsoleCursorPosition SetPriorityClass GetDevicePowerState LCMapStringA lstrcmpiA GetProcAddress VirtualAlloc LoadLibraryA OpenWaitableTimerW AddAtomW CreateEventW GetCommMask SetCommMask GetModuleHandleA FreeEnvironmentStringsW BuildCommDCBA GetConsoleCursorInfo EnumCalendarInfoExA LCMapStringW GetConsoleFontSize HeapCompact GetStringTypeW GetStringTypeA GetLocaleInfoA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree HeapAlloc TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

user32

GetDC ScreenToClient ClientToScreen

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy WriteFmtUserTypeStg

winhttp

WinHttpCheckPlatform