file[.]exe | Triage™

Resubmissions

09/02/2023, 19:36

230209-ybat7saa6310

08/02/2023, 14:53

230208-r9atjabc3s10

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 593KB
Sample230209-ybat7saa63
SHA256 99dab8b3093e77419cff4a3e64045b972f1152812a69332ad88da1aaad56485e
MD5 9b82f37e58f9bb27d2a7dd96e9e2f702
SHA1 d8c507b86e9843594169e4cbcccd9a35c1f97d60
SHA512 56628b14b1f015c61382520964dd9c3c68c6c012af0310d3d3e897dec25b726c1d047d2182da4f23bc7e863fe11caebdb728f4adf2b6f361004be8e46aa740c1
SSDEEP 12288:nsuLrr8h7qGMufOWhNkdgF8h3UHHdM/tQ3W:n5/q7qGMufdhNtF8SH9M/tQ3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.dll 593KB

file.exe

IMPHASH 1928823fd02fe064f4ca976b33bd8937
SHA256 99dab8b3093e77419cff4a3e64045b972f1152812a69332ad88da1aaad56485e
MD5 9b82f37e58f9bb27d2a7dd96e9e2f702
SHA1 d8c507b86e9843594169e4cbcccd9a35c1f97d60
SHA512 56628b14b1f015c61382520964dd9c3c68c6c012af0310d3d3e897dec25b726c1d047d2182da4f23bc7e863fe11caebdb728f4adf2b6f361004be8e46aa740c1
SSDEEP 12288:nsuLrr8h7qGMufOWhNkdgF8h3UHHdM/tQ3W:n5/q7qGMufdhNtF8SH9M/tQ3
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

177808

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap RaiseException RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext FlsGetValue FlsFree FlsAlloc HeapSetInformation HeapCreate HeapDestroy GetStdHandle SetHandleCount HeapAlloc GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA HeapFree GetFileTime GetFileAttributesA FileTimeToLocalFileTime GetTickCount GetOEMCP GetCPInfo FileTimeToSystemTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale WritePrivateProfileStringA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageA LocalFree GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetCurrentProcessId GlobalAddAtomA CloseHandle FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA FindResourceA LoadResource LockResource SizeofResource lstrcmpA GlobalAlloc FreeLibrary GlobalDeleteAtom GlobalLock GlobalUnlock MulDiv SetLastError GetVersion CompareStringA GetLastError MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA GetProcAddress GetModuleHandleA GetVersionExA GetFileType Sleep

user32

UnregisterClassA DestroyMenu RegisterClipboardFormatA PostThreadMessageA ReleaseCapture LoadCursorA SetCapture RegisterWindowMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx EqualRect CopyRect DefWindowProcA CallWindowProcA GetWindowTextA SetFocus ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID SetWindowTextA IsDialogMessageA SendDlgItemMessageA UnhookWindowsHookEx GetWindowThreadProcessId GetLastActivePopup SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA TabbedTextOutA DrawTextA DrawTextExA GrayStringA SetRect MessageBoxW GetMenuState EnableMenuItem CheckMenuItem GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetNextDlgTabItem GetSysColorBrush MessageBeep GetNextDlgGroupItem InvalidateRgn EndDialog GetWindow IsRectEmpty CopyAcceleratorTableA CharNextA GetClassInfoA MessageBoxA LoadIconA IsIconic SendMessageA GetClientRect DrawIcon GetWindowRect InvalidateRect GetDC ReleaseDC EnableWindow GetSystemMetrics GetWindowPlacement SystemParametersInfoA OffsetRect IntersectRect PtInRect CharUpperA ClientToScreen GetWindowDC BeginPaint EndPaint GetSysColor PostMessageA PostQuitMessage SetWindowPos MapDialogRect GetParent SetWindowContextHelpId GetSubMenu

gdi32

ExtSelectClipRgn CreateBitmap GetStockObject CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx OffsetViewportOrgEx SelectObject GetWindowExtEx GetViewportExtEx PtVisible DeleteObject SetMapMode SetTextColor SetBkColor RestoreDC SaveDC DeleteDC GetDeviceCaps SetViewportExtEx SetViewportOrgEx CreateDCA GetDCOrgEx GetClipBox Rectangle Escape ExtTextOutA TextOutA RectVisible GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegQueryValueA RegSetValueExA RegCreateKeyExA RegCloseKey RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CoTaskMemAlloc

oleaut32

SysAllocStringLen SysStringLen SysAllocStringByteLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString

AATSwPm AGjHZEKfwvYHQizmakjUMsYj AIkgNtfE ANCqFRmb AZsxitJzqgvaKjFJ AmtdLjEpbTlXn AqBlkYwTBT BUSanJRDyEep BafKbpzZbMysszdVAvJAdAEpOh BjVXLABFRbMkMdYZrwLDtnqn BjztmnCOIlUskYW BtxBvDT BwRgjSIzDyXRKprO CBUlMIORIIpsrIfWWDXzxbFGr CRbGKhhIIJjeTUbiOVm CXBgle ChQBUjDCAdFv CmrMJZTVMTuNDAYU DJfXZEhrxVoOnQIaZCzrMlJhl DJmVvEPJyUlwpNKhJJllnpGQ DJvfvhBsJfPKIwwXvjTtNjS DjrueuNsMQZJuGFiKnmOYwj DkqOjojSX DllRegisterServer DopsvUCJzIx EIFDbYEwwm EIvfoTYJih ELIxkBrwmT EXYyiQcyfbAOQWCbO EYZChLDVnFIPMppUYdViQPoay EkoCAnWFsC FElwVkaTaxRRGN FYOwZnlvpzRqxUxbg FlrMSvOcLwUpdeoAD FpYAsWCvpJvuoMUjTjbelniY GtzySShWnXfsUb HLCzeBq HUfghoiCWVHtgSglb HZbFljHYbGFvcmrcYlFWDSU HcnrULcPyEhXRswVbpM HjOoqCOimSKUjFjXdFuN HolGDbeRm HuIMyUhUZbrzJHjbegGPZC IIiyYPEYPggpdERitQOMVsNiQu IXgpndcJKTQb IfAaBpNyODwkDsuzoVkTgbGbo IrGoJmdvvsJFEUcMmY IxYXufEXCKlK JdOhJByHqzyrbb JkXECizglqMHumJjvxvc JraCrCTSpf KOzKUBvVThkMW KPYRrwLPTnYqnjWtLbrkMqOtB KipxtvcHXtUzqvx KohLAHgeZferwWcxWZS KwEaxpXhtkvjDUCmIuHNsi LFzXHFSyJVxVEh LNPKCpkPSzN MSiJmPuPMOTPyzp MYKrTwtTfQowf MfrFooxDNiYm MzeNcEWTr NMHwOnDVE NbMJSnrcyInVieL NbibPrOUQidT NjxFQaFpOctyBAzDzMc NpXnElbkOhnEfxhNTdIMZkZRC OBGLqOOhnUsQKUfOgM OHYxBWr OOwPwssFsHlDiquC OXGFEPbP OjIqJSF OuQUzZtvCNJkDo PKwBLsuKSth PLfPZDXsaYGCISkLCYgSMEdKV PRaelFmfQKcQLx PhAFBIKPkYfiO QQcJmBpxIU QlvCcInhzPEbpqVpFbeAa QwjwTmRMW QyiklepmpEoCUUwrydMZbOtEi QypSBBIEjKxyxlDL RDMFzfoLoWqifVscEhD RKFxmsutTY RRTLrCPPbVjAMkNNQnasO RjhazoxnC RtACmlWB SLWrkBLgfqgLk SVJAzYbgtfjnvQQbwOb SjGWtLmeNUZGNmww SnmzFnorJUeYviPnM SphmYJCdJphZ SzeFSFNHtdlDdBP TAXrQZzvvYCDVLohxkjNNAaLi TFkAVgyUutWyOISMIPkd TLaROE TVtBhevMTvjIQ TbKOQlEH TxHFMHfesCrLPRTFAMYfyenzZ UJONvLMyLhxhZrrWwIS UZayWlKPasCCXDITaY UbuVwIqphaB UpHXAtcMFZgimjJ VIFbwAHa VecjwYUoCbhvNPbYgYQtctmal VoIotkEbDIsE VrRwiULrrUGcVvAKNxzbgKI VriRszUSPSFBEa VyLSGYpFoLKew WYbvyb WZqyTNAMFmjAao WcctsbefNaSsH WhaVKkQwMhdvSpOhtuQBzl XQDtDJpTOgPHutWSEqYD XRlWuDFUvJRPEidDQlQjLHjC XUHuvJSfBsTVhPVBe XbmhckZKkMMhYIRu XsJipRPln YAxKDjPKsTaOFlSWPUcFWjG YFhEZKLAkOKVGgbFUzY YPovJuimIZSJeDKkGMjoiJNlQV YTlIaepILvkMCHPhLp YdYbORMJfUfpkR YszmGZdvRU ZRWZqkPnBoLNVbTvQed ZbnWoDM ZnLlvxpWPXI ZyJfghqCBSirj aGPvhvwJBbWzwKyjm aPqnTRScYqnJyPNYoA aVPPmZoaKTt agwyQXpRTYzCgEGaCRE asKnnBCUuagOQIqRPvRRrHvD bQZFUlRmoagfZMnDMsltg bvlGwUk cafVcuHTA cbHqZpOvmmNxfoZSkSpAt cwyaTjxRLIsjdLeySC cypQNLrFVEXQWpnulOJktMjZ dCtNzTBiIQYbirB ddvQtqoZAbBwBN deiAZNIuUcOQlqKHkGnrc djfPjBmwOFZGiQDgFsRX dohXQqyIJnDTrSlzFmynfjbc eDCkflKdgYUEtRgSwHkJzxFts eFRGCUoVhHSgrwxTQ eORGGg eSZBnZxfuhkXoLYHX eWcHdsfBeZ eazmbcEfBYAwAbXhYOgdP eoXnNvIb fEjrUBwaanVKm fZGWceovrOpXioomiWceimqhR ffYPPKXsNfCbdGuu ffvakwmROEMpohZEima fjRWPrxOrkht fnSoSJixTalcpK ftlHxQHfNOJqORvqVmkA gHSKlYIHQTeSsQQYWhWaQJO gJrfXCYVSnIYiXblTjQx gbAsiFObDmnPDFYgZbMTNGrA hBPxbGMEPXTQ hCiJLcjTsdHHutQSOkK hXjxJYFctwxQK hZbsSxHlhCarcNhXZbIH hfAiDSBzNwW hssjGSns iEAXIoFJRCTmCmozTKbtK ijtinlVLZgXFzkUKBAVBc jEiNBrFQSlTKXTwkncWrww jaipxINnPogCUGcpDjR jdfDptsimhbWZFC jlXQpCnBhUzgMeUPSZQ jnVHruDxyzYSxiyVrrdNz jsOfhsYMHsvujfIyFtRhRBm jyVuFTNuMHRemVeZWhVt kIWyrRkTdhojgxAMxGiwITiJqP kIrFIPgyzWMTbyYgxsnE lURUNrg lWAQAduxzYPnPgzvexheQfp mOqffecmZqqY mRAmfOAKkGzdyc mUkOMjWEvMawOWbwaRhnids mVkCIDUvHtCaQTagheeu mWJKucJMNUiaQ mcWLazNyLgKYLPqoCy musFmPxguMqTkz nxVZCskcYTtxYZStkooeLJS oBRTJpsqECpSTyPfZZLJmy oDlXcTUJUmPSFASGqkrxin oJVBjs oMyaOsmimvnGdLGaytBCEe ofxFekoEVePPkE osPhjldGZiLxqFvIVrM owOuKopaQqIhdNScDr pJQaxOQw pOkkSBNOsq pUHJWdFsbvgRxiTPFMuJD pacKjRAiUFj puPaCIgTiwI pujqgwPWvWeKAGrq qCUDMMxOVSNluVivTFnJW qDBSBiSereteNlbA qFUVRJEWePUz qHZrfjxHJtucnSUBuLoPhhqg qPkvivREbCIkQzKDuPFqOmP qSpimOrFSMYs qnCQUVxOYDiLQ qpZewPtjpbUKrsXpmM qsQxmjFx qvRhBQzphMJuhksrKFdr rHcXXbwscEjfvhbKcbIiQKs rtRZJHksW sRtTqlBTY svLFofjBYZSVFKuGnyaLqE tqawUwChKfLtTDprf trWgBYvluemhbL ucRlgJY vIDnQleU vbiraMeiYUVAiLJKvwdsT wEWQoPXQVTyEYevdUuhHiB wEitSGrzAxzMLTi wFPssogdxQgfAwDfP wKJFPnEzHsSEAbIfIZzgtFrfe wPKOsVwsCr wRePjppoXWiASt wSlKkRHBPvXA wTcfhtGhTRzj wYOIKuXqtDlM wuqQVMnTbvcTcrKMhrUJ wxowjYerxPNxCNr wzwtONUUvMkuNnyAiglPgKFuH xFCHWGjXVWWycnRQvzHqiKH xRhbTEMGaUmBpfOlhxvkOq xUIUlVonwONVKpRzXToerXs xVeVqXnY xXXrMaFEoWKhDEixk yIYOATESKeNOpeFjlpF yXRGOfH yZdDmxLbiimVUbOamYJI ydTTopC ygbxbsKxBjlMvKYtpYvShs yuCYhklLeFMYb yyMJgNPIjXBqd zFhMRVofDAQGkNclbBXVXbyA zKSoatFDLWOsFSoWP zXudPT zpRHiAZdtSSamEBwZmElqB zsydgFIJCy zvsqMWjCLwqDsVVHIIWVvVbr zxMLYdyUbzseOGBlGHmYpyNo