file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 299KB
Sample230207-bph2eagh37
SHA256 13af9de5b7f7fca27f2a3f71f6139d0dd5a4fb64718252df02c3504000f713cb
MD5 6d009a731642082c57d26e3525e57456
SHA1 616815562a16e5fe87a514eaebf3d560f4a5f527
SHA512 24f9677da85f894f6e3e0102cdb5aeb6e7cb3d8bc8efe49361fe8c00d2be9e3f81ee7f4485011975565dfa42b5a78b36ede1c8c4913516bcfb827e276af8a7f3
SSDEEP 3072:Kab6bldLYwRm5GO6bBiBQdk3SHvRuQjiMTE5y8a5H:fWdLY3ybBiBkpPRuQj9b8a
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 299KB

file.exe

IMPHASH f6c13c36e64eade6a67b9da9bdf097fd
SHA256 13af9de5b7f7fca27f2a3f71f6139d0dd5a4fb64718252df02c3504000f713cb
MD5 6d009a731642082c57d26e3525e57456
SHA1 616815562a16e5fe87a514eaebf3d560f4a5f527
SHA512 24f9677da85f894f6e3e0102cdb5aeb6e7cb3d8bc8efe49361fe8c00d2be9e3f81ee7f4485011975565dfa42b5a78b36ede1c8c4913516bcfb827e276af8a7f3
SSDEEP 3072:Kab6bldLYwRm5GO6bBiBQdk3SHvRuQjiMTE5y8a5H:fWdLY3ybBiBkpPRuQj9b8a
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19151

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GetCurrentProcess GetComputerNameW GetTickCount ReadConsoleW GetGeoInfoW SetProcessPriorityBoost GlobalAlloc IsProcessInJob GetSystemWindowsDirectoryA EnumSystemCodePagesA GetTempPathW LCMapStringA GetLastError GetProcAddress InterlockedIncrement LoadLibraryA GetProcessWorkingSetSize BuildCommDCBAndTimeoutsW GetCommMask AddAtomA FoldStringW FoldStringA GetModuleHandleA SetLocaleInfoW BuildCommDCBA ReadConsoleInputW GetWindowsDirectoryW DeleteTimerQueueTimer IsBadStringPtrW lstrcpynA VirtualAlloc GetDateFormatW LCMapStringW GetStringTypeW HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetStartupInfoW RtlUnwind HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventA

ole32

ReadClassStg