file[.]exe | Triage™

General

Target
file.exe
Size 327KB
Sample230123-yxpkgsgh3w
SHA256 9947926390af05d3d3dab589ae2b3c497ea79bb07ab37a72d2fb78477e45168b
MD5 6b4d59acb5c586be12c57db820239bcb
SHA1 769ec4640b8649ae956fec9f4fea1fa1ce854314
SHA512 e7459830ca32c5556b3413bd73ba404a281d13e08b540cdf278bef04c86f33feb78371c7c851d1f97e8ca767d416836436e0ecf00c2c0dbdb94a8d3bc61e5c21
SSDEEP 6144:2L/C8iny3nz1yKSnViagtQK/fu1d0O8lmTb:2bCXnQ1ybctQKXu1el
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH 896bd4c3b553275a07449e8e12ceb759
SHA256 9947926390af05d3d3dab589ae2b3c497ea79bb07ab37a72d2fb78477e45168b
MD5 6b4d59acb5c586be12c57db820239bcb
SHA1 769ec4640b8649ae956fec9f4fea1fa1ce854314
SHA512 e7459830ca32c5556b3413bd73ba404a281d13e08b540cdf278bef04c86f33feb78371c7c851d1f97e8ca767d416836436e0ecf00c2c0dbdb94a8d3bc61e5c21
SSDEEP 6144:2L/C8iny3nz1yKSnViagtQK/fu1d0O8lmTb:2bCXnQ1ybctQKXu1el
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17887

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement VerSetConditionMask ReadConsoleA GetConsoleAliasA SetConsoleActiveScreenBuffer GetModuleHandleW GetWindowsDirectoryA GetGeoInfoW GetPriorityClass GlobalAlloc LoadLibraryW GetNamedPipeInfo GetDevicePowerState IsBadStringPtrA LCMapStringA SetLastError lstrcmpiA GetProcAddress FindResourceExW HeapSize BuildCommDCBW OpenWaitableTimerA LoadLibraryA DnsHostnameToComputerNameA CreateEventW AddAtomA SetCommMask FreeEnvironmentStringsW VirtualProtect GetConsoleCursorInfo CreateWaitableTimerA GetConsoleProcessList EnumCalendarInfoExA LCMapStringW GetStringTypeW MultiByteToWideChar lstrlenA GetConsoleAliasExesA VirtualAlloc CreateFiber HeapAlloc Sleep ExitProcess GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetLocaleInfoA WideCharToMultiByte GetStringTypeA

user32

GetCaretPos WindowFromDC GetMenuInfo GetCursorInfo

gdi32

GetCharWidthA

advapi32

BackupEventLogA

Name

.text

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

93KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lumovuf

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.naye

Size

1024B

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.geceka

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

164KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

file.exe

kernel32

user32

gdi32

advapi32