file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 193KB
Sample230311-sx2bdsaa84
SHA256 eb4a6242ff57c4bd6b94e27ed4d6fd3e912b0c56a91ae557ee5bfe084cfc379d
MD5 c00985e0211d954fe396c66ab1e8d44b
SHA1 99a7d2b6d21298350a2364be9f9231c8acce667b
SHA512 fcbc1962619c9b397342c89ebec3a1646f1af8056bc5bd2161f06a7ca22b28447edbfa6e2a1c82d007a72226b6f8cdc5fcffb7b3358d381a51d01c618561f381
SSDEEP 3072:R8veoq/d3z8VqDH3zngvIOKdSn/P4mrAPCdQesQVLoS69FYYJiX6M+TJ:wql3z8VkGIOKsnHDAP6sEYF1i
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 193KB

file.exe

IMPHASH 819f52a965a7f0cab7b5bf24d828c3d6
SHA256 eb4a6242ff57c4bd6b94e27ed4d6fd3e912b0c56a91ae557ee5bfe084cfc379d
MD5 c00985e0211d954fe396c66ab1e8d44b
SHA1 99a7d2b6d21298350a2364be9f9231c8acce667b
SHA512 fcbc1962619c9b397342c89ebec3a1646f1af8056bc5bd2161f06a7ca22b28447edbfa6e2a1c82d007a72226b6f8cdc5fcffb7b3358d381a51d01c618561f381
SSDEEP 3072:R8veoq/d3z8VqDH3zngvIOKdSn/P4mrAPCdQesQVLoS69FYYJiX6M+TJ:wql3z8VkGIOKsnHDAP6sEYF1i
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15852

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleInputA VerifyVersionInfoW GetCPInfoExA CreateEventA GetSystemDirectoryW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer OpenWaitableTimerW GetFileAttributesW EnumResourceTypesW GetLongPathNameW GetModuleHandleW SetThreadLocale InterlockedCompareExchange FindNextFileA LocalFlags WaitCommEvent GetComputerNameExW GetConsoleAliasW PulseEvent WriteProfileSectionW GetLastError GetConsoleMode AssignProcessToJobObject SetCalendarInfoA QueryInformationJobObject GetComputerNameW EnumTimeFormatsW AddAtomA SetSystemTime _llseek GetShortPathNameA EnumCalendarInfoA EnumCalendarInfoExW FindNextFileW CreateActCtxA SetStdHandle GetWindowsDirectoryW FindFirstVolumeMountPointW WritePrivateProfileSectionW LoadLibraryW WriteConsoleW CloseHandle HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP FlushFileBuffers IsProcessorFeaturePresent LCMapStringW GetStringTypeW ReadFile SetFilePointer CreateFileW

user32

LoadMenuW GetComboBoxInfo DefDlgProcA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

LookupAccountSidW

shell32

FindExecutableA