file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 458KB
Sample230119-abf48aaa3t
SHA256 bcf0edb110d23ffbee35628639d0ceb0f2cfb010173231a7b5991ad107f657e6
MD5 6b31bc0c4638df322501e431484470c1
SHA1 3b13e57079f2e790ff753985e05f424993b33e9a
SHA512 75dc040f37c3f8f9532654a633883770f34b612a19c76e76a9821c3fe7e72de018cb777b57cbd80a49631039e86cd53ebbb9cf748a83794dbe469ea72c005c6e
SSDEEP 6144:tHLy6KEATmk36zWxABVU5XzQTK8VobynJvppae2foSpOPZElnyHS2x7MrY:tHu6LrSx4GFzQRVo6pae2A2OkTA4r
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 458KB

file.exe

IMPHASH 06cc0d8d617bdbf0794f46c8a802580f
SHA256 bcf0edb110d23ffbee35628639d0ceb0f2cfb010173231a7b5991ad107f657e6
MD5 6b31bc0c4638df322501e431484470c1
SHA1 3b13e57079f2e790ff753985e05f424993b33e9a
SHA512 75dc040f37c3f8f9532654a633883770f34b612a19c76e76a9821c3fe7e72de018cb777b57cbd80a49631039e86cd53ebbb9cf748a83794dbe469ea72c005c6e
SSDEEP 6144:tHLy6KEATmk36zWxABVU5XzQTK8VobynJvppae2foSpOPZElnyHS2x7MrY:tHu6LrSx4GFzQRVo6pae2A2OkTA4r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19953

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA PeekNamedPipe lstrcpynA FindResourceExW EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetConsoleAliasA GetCurrentProcess FlushConsoleInputBuffer GetTickCount ConvertFiberToThread GetWindowsDirectoryA GetGeoInfoW FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW DnsHostnameToComputerNameW HeapValidate SetConsoleCursorPosition IsBadStringPtrW GetDevicePowerState LCMapStringA lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW LoadLibraryA OpenWaitableTimerW AddAtomW CreateEventW GetCommMask SetCommMask GetModuleHandleA CreateWaitableTimerW FreeEnvironmentStringsW GetConsoleCursorInfo EnumCalendarInfoExA LCMapStringW GetConsoleFontSize SetPriorityClass GetStringTypeW GetStringTypeA GetLocaleInfoA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree HeapAlloc TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

user32

GetCaretPos GetDC ScreenToClient

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy ReadClassStm

winhttp

WinHttpCheckPlatform