file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 328KB
Sample230119-c6fhaaaa8t
SHA256 b888fabb2cdb2bfc5aafd12e2656f5894be023cbd7b7b27553e7ebe4da722701
MD5 2b648a7ac79918aefd3c35732a7b7bf0
SHA1 beb1e7b98504f1c876a5488a26877022b351c558
SHA512 d665a9c9d008dc663f6021869ee48adddf6694b9d3cc722eb42f60913c6574137478f540ca0a7f5b8436f1562ccd2a67b5a26f13ccd2698485cacc134bdcaa3a
SSDEEP 6144:qZ6LNMJOE0fUXaYxshb+c7MkcQjOPZElnyHSRiTY:qZ6eJlKb2objciOkTu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH 58bd6e73d60d59afc1470a39d9696f05
SHA256 b888fabb2cdb2bfc5aafd12e2656f5894be023cbd7b7b27553e7ebe4da722701
MD5 2b648a7ac79918aefd3c35732a7b7bf0
SHA1 beb1e7b98504f1c876a5488a26877022b351c558
SHA512 d665a9c9d008dc663f6021869ee48adddf6694b9d3cc722eb42f60913c6574137478f540ca0a7f5b8436f1562ccd2a67b5a26f13ccd2698485cacc134bdcaa3a
SSDEEP 6144:qZ6LNMJOE0fUXaYxshb+c7MkcQjOPZElnyHSRiTY:qZ6eJlKb2objciOkTu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA PeekNamedPipe lstrcpynA EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetCurrentProcess FlushConsoleInputBuffer FreeEnvironmentStringsA GetTickCount GetWindowsDirectoryA GetGeoInfoW FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW DnsHostnameToComputerNameW GetConsoleAliasW HeapValidate SetConsoleCursorPosition IsBadStringPtrW GetDevicePowerState LCMapStringA DeleteFiber lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW OpenWaitableTimerA LoadLibraryA AddAtomW CreateEventW GetCommMask SetCommMask GetModuleHandleA CreateWaitableTimerW GetConsoleCursorInfo EnumCalendarInfoExA GetConsoleFontSize SetPriorityClass GetStringTypeW GetStringTypeA GetLocaleInfoA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree HeapAlloc TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

user32

GetCaretPos GetDC ScreenToClient

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy ReadClassStm

winhttp

WinHttpCheckPlatform