file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 395KB
Sample230207-e5yzcahd46
SHA256 5ec9de28fba96485bf91582b0629f85a95fe77a5628bb598ac4137cf4b2319f3
MD5 f342435a8afd4f8f5e995b3ddda302d1
SHA1 033d12cf789b945584677303564773657a5d776c
SHA512 0ef320bac11a77aa87aaf5c7cc7e08d2f843a7180966cf30c21e8e7ebc0773b1bc9c9e90b61929b46a4ac9f92f3359a117348b90e872e79aeca789c2c2a520a0
SSDEEP 6144:miSjLInS/WKYbxOg/eWzDYMwMjBix5yMVzu7gTpuQj9WgaL:7McpxOXaAM0x5yiRlj/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 395KB

file.exe

IMPHASH f6c13c36e64eade6a67b9da9bdf097fd
SHA256 5ec9de28fba96485bf91582b0629f85a95fe77a5628bb598ac4137cf4b2319f3
MD5 f342435a8afd4f8f5e995b3ddda302d1
SHA1 033d12cf789b945584677303564773657a5d776c
SHA512 0ef320bac11a77aa87aaf5c7cc7e08d2f843a7180966cf30c21e8e7ebc0773b1bc9c9e90b61929b46a4ac9f92f3359a117348b90e872e79aeca789c2c2a520a0
SSDEEP 6144:miSjLInS/WKYbxOg/eWzDYMwMjBix5yMVzu7gTpuQj9WgaL:7McpxOXaAM0x5yiRlj/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19135

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GetCurrentProcess GetComputerNameW GetTickCount ReadConsoleW GetGeoInfoW SetProcessPriorityBoost GlobalAlloc IsProcessInJob GetSystemWindowsDirectoryA EnumSystemCodePagesA GetTempPathW LCMapStringA GetLastError GetProcAddress InterlockedIncrement LoadLibraryA GetProcessWorkingSetSize BuildCommDCBAndTimeoutsW GetCommMask AddAtomA FoldStringW FoldStringA GetModuleHandleA SetLocaleInfoW BuildCommDCBA ReadConsoleInputW GetWindowsDirectoryW DeleteTimerQueueTimer IsBadStringPtrW lstrcpynA VirtualAlloc GetDateFormatW LCMapStringW GetStringTypeW HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess GetStartupInfoW RtlUnwind HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventA

ole32

ReadClassStg