file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 264KB
Sample230311-te3beacb6t
SHA256 55163961897f6ca084044696de2b862ca6271f6f2b5a175752b0aa7f4b572d66
MD5 406ae82ddae342bf253af77432145104
SHA1 15c24bb700696ab65a74c9fe26410d15b856c0ab
SHA512 6f98d8de305c888175e385cefd55395f977e84b57ef74d7e2fd3b61a8a8f6fbc0cc263386737a5512bd541bb84899db181a79dfb331e3bc45386fca3896a61ea
SSDEEP 6144:EqoJ4muj5QsR9hyTdzEiOKIgvQ1JLe3GVXlx:to4DKuDy5/zLULDVX
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 264KB

file.exe

IMPHASH 819f52a965a7f0cab7b5bf24d828c3d6
SHA256 55163961897f6ca084044696de2b862ca6271f6f2b5a175752b0aa7f4b572d66
MD5 406ae82ddae342bf253af77432145104
SHA1 15c24bb700696ab65a74c9fe26410d15b856c0ab
SHA512 6f98d8de305c888175e385cefd55395f977e84b57ef74d7e2fd3b61a8a8f6fbc0cc263386737a5512bd541bb84899db181a79dfb331e3bc45386fca3896a61ea
SSDEEP 6144:EqoJ4muj5QsR9hyTdzEiOKIgvQ1JLe3GVXlx:to4DKuDy5/zLULDVX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15852

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleInputA VerifyVersionInfoW GetCPInfoExA CreateEventA GetSystemDirectoryW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer OpenWaitableTimerW GetFileAttributesW EnumResourceTypesW GetLongPathNameW GetModuleHandleW SetThreadLocale InterlockedCompareExchange FindNextFileA LocalFlags WaitCommEvent GetComputerNameExW GetConsoleAliasW PulseEvent WriteProfileSectionW GetLastError GetConsoleMode AssignProcessToJobObject SetCalendarInfoA QueryInformationJobObject GetComputerNameW EnumTimeFormatsW AddAtomA SetSystemTime _llseek GetShortPathNameA EnumCalendarInfoA EnumCalendarInfoExW FindNextFileW CreateActCtxA SetStdHandle GetWindowsDirectoryW FindFirstVolumeMountPointW WritePrivateProfileSectionW LoadLibraryW WriteConsoleW CloseHandle HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP FlushFileBuffers IsProcessorFeaturePresent LCMapStringW GetStringTypeW ReadFile SetFilePointer CreateFileW

user32

LoadMenuW GetComboBoxInfo DefDlgProcA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

LookupAccountSidW

shell32

FindExecutableA