file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 325KB
Sample230119-avmfcadh26
SHA256 eee89bed7c64c09461e71821144b595a1f2b0e646b25c4fd8e5662c8d2f0a7be
MD5 288f948c38e0724dfd4d182c75f7063c
SHA1 5b731c7737cb1b0096caccf5b4313e756b5db7f0
SHA512 d8c9fab51e07af362e1632c269e75996801a85005ae40f0bbfa61c831ddaacfe6cb0a2aa609ce94dd0fe9190e69bc1986d6373d33c0ca3e28f520efc7c2cd026
SSDEEP 3072:sqKZFLwALJ5hqn0F5W0MgBRdjvFkD5FGDaOP2lKEssMOeY5QHShya6YPZq9N8g:KFL/LJ/qVydjvSqDaOPZElnyHSMYPY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 325KB

file.exe

IMPHASH 58bd6e73d60d59afc1470a39d9696f05
SHA256 eee89bed7c64c09461e71821144b595a1f2b0e646b25c4fd8e5662c8d2f0a7be
MD5 288f948c38e0724dfd4d182c75f7063c
SHA1 5b731c7737cb1b0096caccf5b4313e756b5db7f0
SHA512 d8c9fab51e07af362e1632c269e75996801a85005ae40f0bbfa61c831ddaacfe6cb0a2aa609ce94dd0fe9190e69bc1986d6373d33c0ca3e28f520efc7c2cd026
SSDEEP 3072:sqKZFLwALJ5hqn0F5W0MgBRdjvFkD5FGDaOP2lKEssMOeY5QHShya6YPZq9N8g:KFL/LJ/qVydjvSqDaOPZElnyHSMYPY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA PeekNamedPipe lstrcpynA EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetCurrentProcess FlushConsoleInputBuffer FreeEnvironmentStringsA GetTickCount GetWindowsDirectoryA GetGeoInfoW FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW DnsHostnameToComputerNameW GetConsoleAliasW HeapValidate SetConsoleCursorPosition IsBadStringPtrW GetDevicePowerState LCMapStringA DeleteFiber lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW OpenWaitableTimerA LoadLibraryA AddAtomW CreateEventW GetCommMask SetCommMask GetModuleHandleA CreateWaitableTimerW GetConsoleCursorInfo EnumCalendarInfoExA GetConsoleFontSize SetPriorityClass GetStringTypeW GetStringTypeA GetLocaleInfoA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree HeapAlloc TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

user32

GetCaretPos GetDC ScreenToClient

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy ReadClassStm

winhttp

WinHttpCheckPlatform