file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 880KB
Sample230321-al64dsga27
SHA256 a759dfe145751752776c392ad2f5dffd1fa7f4e77e3f5daeeb2258baa2271262
MD5 7e9d6867dfd8711952376aa02aaeb453
SHA1 a90cf5c5d9079716dde8b0c2be20dbd6fb0fbc3d
SHA512 94a0e3160fed3a977d631ee1b2c9c9cc2235fedab0ad7e1231ae837ccfbacc04d3a92e9a367dfe299bdf998bbb926667f84b013263acb41bf0debf23fed61674
SSDEEP 6144:LQuiA1RTz/cYja2ieb5YbF5R+Jn8xH97r7F/1d43wUmDm:nz/9ja2ieFYp5R+I7VY
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 880KB

file.exe

IMPHASH 9d7d0119149b87d9470a48af373560eb
SHA256 a759dfe145751752776c392ad2f5dffd1fa7f4e77e3f5daeeb2258baa2271262
MD5 7e9d6867dfd8711952376aa02aaeb453
SHA1 a90cf5c5d9079716dde8b0c2be20dbd6fb0fbc3d
SHA512 94a0e3160fed3a977d631ee1b2c9c9cc2235fedab0ad7e1231ae837ccfbacc04d3a92e9a367dfe299bdf998bbb926667f84b013263acb41bf0debf23fed61674
SSDEEP 6144:LQuiA1RTz/cYja2ieb5YbF5R+Jn8xH97r7F/1d43wUmDm:nz/9ja2ieFYp5R+I7VY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

115281

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessHeap GetStartupInfoW ExitProcess RtlUnwind HeapReAlloc RaiseException HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter HeapAlloc TerminateProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetACP GetOEMCP GetTimeZoneInformation GetLocaleInfoA GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA HeapFree GetFileTime GetFileAttributesW FileTimeToLocalFileTime GetTickCount SetErrorMode FileTimeToSystemTime CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale lstrlenA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageW LocalFree MulDiv GetModuleHandleA GlobalFindAtomW CompareStringW GetVersionExA GetCurrentProcessId GetLastError SetLastError GlobalAddAtomW CloseHandle GlobalUnlock lstrlenW WritePrivateProfileStringW FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW WideCharToMultiByte CompareStringA MultiByteToWideChar InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleW Sleep LoadLibraryA GetProcAddress GetModuleFileNameW InterlockedDecrement FindResourceW LoadResource LockResource GetSystemTimeAsFileTime SizeofResource

user32

RegisterClipboardFormatW PostThreadMessageW InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableW CharNextW ReleaseCapture LoadCursorW SetCapture ShowWindow MoveWindow SetWindowTextW IsDialogMessageW EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetWindowTextW GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect LoadIconW GetSystemMenu UnregisterClassA AppendMenuW IsIconic SendMessageW GetSysColor DestroyMenu CopyRect UnhookWindowsHookEx GetWindowThreadProcessId GetLastActivePopup MessageBoxW SetCursor UnregisterClassW CharUpperW SetWindowsHookExW CallNextHookEx GetSysColorBrush MessageBeep GetNextDlgGroupItem SetFocus InvalidateRgn GetSystemMetrics GetClientRect DrawIcon EnableWindow PostMessageW PostQuitMessage SetWindowPos MapDialogRect GetParent SetWindowContextHelpId GetWindow EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem GetWindowLongW IsWindow DestroyWindow CreateDialogIndirectParamW SetActiveWindow GetActiveWindow GetDesktopWindow CheckMenuItem EnableMenuItem GetMenuState ModifyMenuW GetFocus LoadBitmapW GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageW GetKeyState IsWindowVisible DispatchMessageW GetMessageW TranslateMessage IsChild

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetDeviceCaps GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject CreateBitmap TextOutW RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox ExtTextOutW GetObjectW Escape

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegDeleteKeyW RegQueryValueW RegOpenKeyW RegEnumKeyW RegCloseKey RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysFreeString VariantInit VariantCopy VariantClear SysAllocStringLen SysStringLen VariantChangeType OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy GetErrorInfo SysAllocString