file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 861KB
Sample230412-vlthhsfb4y
SHA256 2fe63aba53a060169c71b5b64c1674bf13fdf31329c4d1a528f219dfc07dd8b5
MD5 ee9ba0b4e9b8f3cefc4813f3a51e0507
SHA1 32b51a07dde4fe512612d65096e39939eb93e286
SHA512 92434ef2d6ed018a6352437e48d09bd1874c9a80829973ec1afb10ad038bdba33196692ff3b32a9930126935a85b11ed86e5273b42bddb86ddbafb2b6de585dc
SSDEEP 24576:37FRfPnLjrcvV2FDnfxM8Gf4doAAJtcKWVGW+znMI:3pRXnbcvVYDnm8y4dofcK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 861KB

file.exe

IMPHASH 2339ac77bf9371500ebbf86df3a10d43
SHA256 2fe63aba53a060169c71b5b64c1674bf13fdf31329c4d1a528f219dfc07dd8b5
MD5 ee9ba0b4e9b8f3cefc4813f3a51e0507
SHA1 32b51a07dde4fe512612d65096e39939eb93e286
SHA512 92434ef2d6ed018a6352437e48d09bd1874c9a80829973ec1afb10ad038bdba33196692ff3b32a9930126935a85b11ed86e5273b42bddb86ddbafb2b6de585dc
SSDEEP 24576:37FRfPnLjrcvV2FDnfxM8Gf4doAAJtcKWVGW+znMI:3pRXnbcvVYDnm8y4dofcK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27384

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

FreeSid AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA RegCloseKey RegDeleteValueA RegOpenKeyExA RegQueryValueExA RegQueryInfoKeyA RegSetValueExA RegCreateKeyExA

kernel32

LocalFree LocalAlloc GetLastError GetCurrentProcess lstrlenA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA CreateDirectoryA GetFileAttributesA GetModuleFileNameA GetSystemDirectoryA RemoveDirectoryA FindClose FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA ExpandEnvironmentStringsA GlobalFree GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByte GetShortPathNameA GetPrivateProfileStringA GetPrivateProfileIntA CompareStringA GetVersion GetModuleHandleW FreeResource LockResource LoadResource SizeofResource CloseHandle ReadFile WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA SetCurrentDirectoryA GetTempFileNameA GetVolumeInformationA FormatMessageA GetCurrentDirectoryA ExitProcess LoadLibraryExA GetVersionExA GetExitCodeProcess GetProcAddress CreateProcessA GetTempPathA GetSystemInfo CreateMutexA SetEvent CreateEventA CreateThread ResetEvent TerminateThread GetDriveTypeA FindResourceA LoadLibraryA FreeLibrary InterlockedExchange Sleep InterlockedCompareExchange GetStartupInfoA RtlUnwind SetUnhandledExceptionFilter GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter EnumResourceLanguagesA MulDiv GetDiskFreeSpaceA WaitForSingleObject

gdi32

GetDeviceCaps

user32

SendDlgItemMessageA GetDlgItem SetForegroundWindow SetWindowTextA MessageBoxA DialogBoxIndirectParamA ShowWindow EnableWindow GetDlgItemTextA GetDC ReleaseDC SetWindowPos SendMessageA PeekMessageA MsgWaitForMultipleObjects DispatchMessageA CallWindowProcA GetWindowLongA SetWindowLongA CharPrevA CharUpperA CharNextA ExitWindowsEx EndDialog GetDesktopWindow LoadStringA SetDlgItemTextA MessageBeep GetWindowRect GetSystemMetrics

msvcrt

_cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _amsg_exit __setusermatherr __p__commode __p__fmode __set_app_type ?terminate@@YAXXZ _controlfp __getmainargs memcpy memset _vsnprintf

comctl32

ord17

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA