file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 395KB
Sample230207-becrmsgg67
SHA256 84808ad5835a69ced89441cdf92c4e5570fffe6d5936aa2b34c7b41d7a25601b
MD5 7552458435bbdecbc398defe4ab28fd9
SHA1 046e2e4619826d7c62f547b520094b59394d53f3
SHA512 d098fa1f978f253c5829d76bda981a1501bd6a535b25bd3941f1d167ce4011158db4d65228540df2d0a15eadbc4d611f893c805aef3a9c32719bf36a490956ed
SSDEEP 6144:uNKLJ96IZxIjnHPXfTChUY7ZMwyTvSuQj9XWDa:YKVAFLHvfT6UcZM8ljs
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 395KB

file.exe

IMPHASH f6c13c36e64eade6a67b9da9bdf097fd
SHA256 84808ad5835a69ced89441cdf92c4e5570fffe6d5936aa2b34c7b41d7a25601b
MD5 7552458435bbdecbc398defe4ab28fd9
SHA1 046e2e4619826d7c62f547b520094b59394d53f3
SHA512 d098fa1f978f253c5829d76bda981a1501bd6a535b25bd3941f1d167ce4011158db4d65228540df2d0a15eadbc4d611f893c805aef3a9c32719bf36a490956ed
SSDEEP 6144:uNKLJ96IZxIjnHPXfTChUY7ZMwyTvSuQj9XWDa:YKVAFLHvfT6UcZM8ljs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19151

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GetCurrentProcess GetComputerNameW GetTickCount ReadConsoleW GetGeoInfoW SetProcessPriorityBoost GlobalAlloc IsProcessInJob GetSystemWindowsDirectoryA EnumSystemCodePagesA GetTempPathW LCMapStringA GetLastError GetProcAddress InterlockedIncrement LoadLibraryA GetProcessWorkingSetSize BuildCommDCBAndTimeoutsW GetCommMask AddAtomA FoldStringW FoldStringA GetModuleHandleA SetLocaleInfoW BuildCommDCBA ReadConsoleInputW GetWindowsDirectoryW DeleteTimerQueueTimer IsBadStringPtrW lstrcpynA VirtualAlloc GetDateFormatW LCMapStringW GetStringTypeW HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetStartupInfoW RtlUnwind HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventA

ole32

ReadClassStg