file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 461KB
Sample230119-fn4zpsfb63
SHA256 54ddaf3ed13bb27ccf41e35ee3de46becc4b11697f2dc34f5ab7817d4fddcddf
MD5 e85567a1c4a2e08a844150b70299a4fe
SHA1 b4079aad3007c63d4add82fc1745a627523cf9ae
SHA512 3460b70fa2ada8ed8376e2e4637b245ab983284da8f1afc238c765c93f5d57ed9f5a77b9426fc441cc0dddf7a9e32bc8cbd6636e60a5f06e8d9d17010fe6f488
SSDEEP 6144:j9iLYZ0vBMQETkpru62X2To1D4CINGlapGSHXROPZElnyHSI0dL4VxY:j9i40XETkp663o1D4YObROkTPM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 461KB

file.exe

IMPHASH 58bd6e73d60d59afc1470a39d9696f05
SHA256 54ddaf3ed13bb27ccf41e35ee3de46becc4b11697f2dc34f5ab7817d4fddcddf
MD5 e85567a1c4a2e08a844150b70299a4fe
SHA1 b4079aad3007c63d4add82fc1745a627523cf9ae
SHA512 3460b70fa2ada8ed8376e2e4637b245ab983284da8f1afc238c765c93f5d57ed9f5a77b9426fc441cc0dddf7a9e32bc8cbd6636e60a5f06e8d9d17010fe6f488
SSDEEP 6144:j9iLYZ0vBMQETkpru62X2To1D4CINGlapGSHXROPZElnyHSI0dL4VxY:j9i40XETkp663o1D4YObROkTPM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA PeekNamedPipe lstrcpynA EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetCurrentProcess FlushConsoleInputBuffer FreeEnvironmentStringsA GetTickCount GetWindowsDirectoryA GetGeoInfoW FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW DnsHostnameToComputerNameW GetConsoleAliasW HeapValidate SetConsoleCursorPosition IsBadStringPtrW GetDevicePowerState LCMapStringA DeleteFiber lstrcmpiA GetProcAddress VirtualAlloc BuildCommDCBW OpenWaitableTimerA LoadLibraryA AddAtomW CreateEventW GetCommMask SetCommMask GetModuleHandleA CreateWaitableTimerW GetConsoleCursorInfo EnumCalendarInfoExA GetConsoleFontSize SetPriorityClass GetStringTypeW GetStringTypeA GetLocaleInfoA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree HeapAlloc TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

user32

GetCaretPos GetDC ScreenToClient

advapi32

BackupEventLogA

ole32

CoRegisterMallocSpy ReadClassStm

winhttp

WinHttpCheckPlatform