file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 326KB
Sample230119-bp4ccadf5s
SHA256 79149b39b7ffcb32a593413cc677dfc2e98e4d7d3544f8b2a36c7f0211b5b9a8
MD5 71d904bd070784b30f0f40d4a13543a5
SHA1 3786b69826ad610f14bcbbd99f2c4e337f0a1b9a
SHA512 5de8fdbe76197c9619d37548edb5b6a9aa03d0b1c1d543c799a18b232c0b84e0615241a976eb714bbd93957c22e1412c04f5b90621abcb301ec3e45a58a22ae9
SSDEEP 6144:rVsL6lgnx3tLzDZXXPNyfYOPZElnyHSEY:rVs6gx3tLzFX1yfYOkTE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 326KB

file.exe

IMPHASH 58bd6e73d60d59afc1470a39d9696f05
SHA256 79149b39b7ffcb32a593413cc677dfc2e98e4d7d3544f8b2a36c7f0211b5b9a8
MD5 71d904bd070784b30f0f40d4a13543a5
SHA1 3786b69826ad610f14bcbbd99f2c4e337f0a1b9a
SHA512 5de8fdbe76197c9619d37548edb5b6a9aa03d0b1c1d543c799a18b232c0b84e0615241a976eb714bbd93957c22e1412c04f5b90621abcb301ec3e45a58a22ae9
SSDEEP 6144:rVsL6lgnx3tLzDZXXPNyfYOPZElnyHSEY:rVs6gx3tLzFX1yfYOkTE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA PeekNamedPipe lstrcpynA EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetCurrentProcess FlushConsoleInputBuffer FreeEnvironmentStringsA GetTickCount GetWindowsDirectoryA GetGeoInfoW FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW DnsHostnameToComputerNameW GetConsoleAliasW HeapValidate SetConsoleCursorPosition IsBadStringPtrW GetDevicePowerState LCMapStringA DeleteFiber lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW OpenWaitableTimerA LoadLibraryA AddAtomW CreateEventW GetCommMask SetCommMask GetModuleHandleA CreateWaitableTimerW GetConsoleCursorInfo EnumCalendarInfoExA GetConsoleFontSize SetPriorityClass GetStringTypeW GetStringTypeA GetLocaleInfoA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree HeapAlloc TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

user32

GetCaretPos GetDC ScreenToClient

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy ReadClassStm

winhttp

WinHttpCheckPlatform