file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 298KB
Sample230207-c61s8acc4x
SHA256 ec734eb1b4d74abfed6d5328fb980e24f78fffd39d19a21d2d008b802d2c41c5
MD5 1b2a209423923c8095ed6c9b234bdb08
SHA1 39a042adbe2101f24cd59dc5b734b709851ae0fe
SHA512 34d2ec1aebd0af0314c6bed8043b35071628552a5b8a0335d74a99dbd87772a0fda4a8515e3705b0c9f396b4c15237ae268c48d3ec6776e53c132867d5a705ed
SSDEEP 3072:elb6bBJLCaRmqps2VGUJISjvcAlpE/dohTGuQjiMTE52vVa5H:4KJLCZms2Xv3jElo5GuQj91a
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 298KB

file.exe

IMPHASH f6c13c36e64eade6a67b9da9bdf097fd
SHA256 ec734eb1b4d74abfed6d5328fb980e24f78fffd39d19a21d2d008b802d2c41c5
MD5 1b2a209423923c8095ed6c9b234bdb08
SHA1 39a042adbe2101f24cd59dc5b734b709851ae0fe
SHA512 34d2ec1aebd0af0314c6bed8043b35071628552a5b8a0335d74a99dbd87772a0fda4a8515e3705b0c9f396b4c15237ae268c48d3ec6776e53c132867d5a705ed
SSDEEP 3072:elb6bBJLCaRmqps2VGUJISjvcAlpE/dohTGuQjiMTE52vVa5H:4KJLCZms2Xv3jElo5GuQj91a
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19151

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GetCurrentProcess GetComputerNameW GetTickCount ReadConsoleW GetGeoInfoW SetProcessPriorityBoost GlobalAlloc IsProcessInJob GetSystemWindowsDirectoryA EnumSystemCodePagesA GetTempPathW LCMapStringA GetLastError GetProcAddress InterlockedIncrement LoadLibraryA GetProcessWorkingSetSize BuildCommDCBAndTimeoutsW GetCommMask AddAtomA FoldStringW FoldStringA GetModuleHandleA SetLocaleInfoW BuildCommDCBA ReadConsoleInputW GetWindowsDirectoryW DeleteTimerQueueTimer IsBadStringPtrW lstrcpynA VirtualAlloc GetDateFormatW LCMapStringW GetStringTypeW HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetStartupInfoW RtlUnwind HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventA

ole32

ReadClassStg