file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 421KB
Sample230203-avmfcace7t
SHA256 6689dbd112779e3470f50548c4de20d5f9543feaf084635fcabb269c037daad3
MD5 06ed7ea570d899163cd1864c5dc93661
SHA1 c1186c6d2120eaf765ba432e194bafc20066b78e
SHA512 fc1bc989f8fefa7d068dc4add363d16114e26000ca1c791e44e68d83c5decf60db7d859717aed12693c3d6fc73eadd5f1c53e746ca41f8d29a59278e6855f0a7
SSDEEP 6144:uZFEaLCHLEem1q6HSQh3j8u2lMQPPMG17QotQW8Y53lwKwpx5jV6ptCbNKN:uZFEa2HQemAczz2F17wWT5le9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 421KB

file.exe

IMPHASH 8da36f6dce34183aedb624e434f46f7f
SHA256 6689dbd112779e3470f50548c4de20d5f9543feaf084635fcabb269c037daad3
MD5 06ed7ea570d899163cd1864c5dc93661
SHA1 c1186c6d2120eaf765ba432e194bafc20066b78e
SHA512 fc1bc989f8fefa7d068dc4add363d16114e26000ca1c791e44e68d83c5decf60db7d859717aed12693c3d6fc73eadd5f1c53e746ca41f8d29a59278e6855f0a7
SSDEEP 6144:uZFEaLCHLEem1q6HSQh3j8u2lMQPPMG17QotQW8Y53lwKwpx5jV6ptCbNKN:uZFEa2HQemAczz2F17wWT5le9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19478

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA EndUpdateResourceW GetCommState ReadConsoleA GetCurrentProcess SetHandleInformation GetWindowsDirectoryA GetGeoInfoW GetDateFormatA SetProcessPriorityBoost GlobalAlloc IsProcessInJob EnumResourceLanguagesA GetTempPathW LCMapStringA InterlockedExchange GetCPInfoExW GetLastError FindResourceExW VirtualAlloc EnumSystemCodePagesW SetTimerQueueTimer LoadLibraryA WriteConsoleA BuildCommDCBAndTimeoutsW AddAtomW QueryDosDeviceW GetCommMask FoldStringW FoldStringA GetModuleHandleA BuildCommDCBA GetConsoleCursorInfo ReadConsoleInputW GlobalReAlloc IsBadStringPtrW lstrcpynA GetProcAddress GetComputerNameA LCMapStringW GetStartupInfoW HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventW

ole32

ReadClassStm

Name

.text

Size

62KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

188KB

Virtual Size

279KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lulid

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.legaz

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

161KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ