file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 458KB
Sample230119-bdsfpsef93
SHA256 e1768ee41d746a85e369ce8eb08589506e8db09fdf5866c2c8a848aeb2e4c9f1
MD5 9c129bbcb798d25c367d8ff82fffc09c
SHA1 36492a8791c3a7dad7d21b533602b8f94ce56e11
SHA512 a7e6678b7322aa103a238f1ed283b645534b83656eb9b7717cb7ed7ae89e56816ee06fbf20f154e141c873d351f67b059489755d8b2e61cf5c0428fcb213aff2
SSDEEP 6144:oVrLlopTX4rGw86CuE+ZYQ8T8wDGXB8H7DeGMu1pktZpNOPZElnyHSMY:oVrapT4qw50rT8wDGXeH7xME6HPOkTM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 458KB

file.exe

IMPHASH 58bd6e73d60d59afc1470a39d9696f05
SHA256 e1768ee41d746a85e369ce8eb08589506e8db09fdf5866c2c8a848aeb2e4c9f1
MD5 9c129bbcb798d25c367d8ff82fffc09c
SHA1 36492a8791c3a7dad7d21b533602b8f94ce56e11
SHA512 a7e6678b7322aa103a238f1ed283b645534b83656eb9b7717cb7ed7ae89e56816ee06fbf20f154e141c873d351f67b059489755d8b2e61cf5c0428fcb213aff2
SSDEEP 6144:oVrLlopTX4rGw86CuE+ZYQ8T8wDGXB8H7DeGMu1pktZpNOPZElnyHSMY:oVrapT4qw50rT8wDGXeH7xME6HPOkTM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA PeekNamedPipe lstrcpynA EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetCurrentProcess FlushConsoleInputBuffer FreeEnvironmentStringsA GetTickCount GetWindowsDirectoryA GetGeoInfoW FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW DnsHostnameToComputerNameW GetConsoleAliasW HeapValidate SetConsoleCursorPosition IsBadStringPtrW GetDevicePowerState LCMapStringA DeleteFiber lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW OpenWaitableTimerA LoadLibraryA AddAtomW CreateEventW GetCommMask SetCommMask GetModuleHandleA CreateWaitableTimerW GetConsoleCursorInfo EnumCalendarInfoExA GetConsoleFontSize SetPriorityClass GetStringTypeW GetStringTypeA GetLocaleInfoA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree HeapAlloc TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

user32

GetCaretPos GetDC ScreenToClient

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy ReadClassStm

winhttp

WinHttpCheckPlatform