file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 299KB
Sample230207-aygz2agf74
SHA256 71864f13775192cf8a30f8a9318b224818f6edc52eda6db27b38e549fde0d413
MD5 1f374aa76e90385b3697d554fb113906
SHA1 7c70071eee00e510fdeb851df9fe1bd6aafed42e
SHA512 bac66f3ddcaa964982ab2f108e4354408a22ed68a322df8ad547cd1d0da3d8120e076747147927be4c63132f289b3cef6be6fa1dc423da951bdc5ee580ce4255
SSDEEP 3072:Hfb6b8akULxbdRmbNPv2i3ClwyKy9gfACW4HluQjiMTE5HyNa5D:/zMLFyJRS4y0AC5FuQj9FNa
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 299KB

file.exe

IMPHASH f6c13c36e64eade6a67b9da9bdf097fd
SHA256 71864f13775192cf8a30f8a9318b224818f6edc52eda6db27b38e549fde0d413
MD5 1f374aa76e90385b3697d554fb113906
SHA1 7c70071eee00e510fdeb851df9fe1bd6aafed42e
SHA512 bac66f3ddcaa964982ab2f108e4354408a22ed68a322df8ad547cd1d0da3d8120e076747147927be4c63132f289b3cef6be6fa1dc423da951bdc5ee580ce4255
SSDEEP 3072:Hfb6b8akULxbdRmbNPv2i3ClwyKy9gfACW4HluQjiMTE5HyNa5D:/zMLFyJRS4y0AC5FuQj9FNa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19151

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GetCurrentProcess GetComputerNameW GetTickCount ReadConsoleW GetGeoInfoW SetProcessPriorityBoost GlobalAlloc IsProcessInJob GetSystemWindowsDirectoryA EnumSystemCodePagesA GetTempPathW LCMapStringA GetLastError GetProcAddress InterlockedIncrement LoadLibraryA GetProcessWorkingSetSize BuildCommDCBAndTimeoutsW GetCommMask AddAtomA FoldStringW FoldStringA GetModuleHandleA SetLocaleInfoW BuildCommDCBA ReadConsoleInputW GetWindowsDirectoryW DeleteTimerQueueTimer IsBadStringPtrW lstrcpynA VirtualAlloc GetDateFormatW LCMapStringW GetStringTypeW HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetStartupInfoW RtlUnwind HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventA

ole32

ReadClassStg