file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

4.3MB
MD5

cc39a0e4607ef4251cc44ec77fcd861d
SHA1

3c62e10de457c22dcb5ee5e8106432711b690e52
SHA256

f264f5b3f0819afe42d5436dfdeca52d447c37a15001f85130f687d8dfc57518
SHA512

941dd1242fbe61071de1d87df1442311c8a33cd728abebc33f4ceda69bf25271a2e3c554a30f0517392629834abbe70d3175f8bfca2f2f6f8b6945f2a430dc7d
SSDEEP

98304:mu1xqL7bk2ZOSdzaSQGipHwVw/Pwx+Ag6vbgljLeQZajqlUXjF:f1yTPd2lGwMw/HMUPZo4UZ

Score

1^/10

Malware Config

Signatures

Files

file.exe
.exe windows x64

96d5fa481b9a65c7095d2725e96f5ddd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetClipboardData

advapi32

RegSetValueExA

Sections

.text
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

fwerf30
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fwerf31
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fwerf32
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96d5fa481b9a65c7095d2725e96f5ddd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: - Virtual size: 2.5MB

.rdata Size: - Virtual size: 186KB

.data Size: - Virtual size: 66KB

.pdata Size: - Virtual size: 13KB

_RDATA Size: - Virtual size: 244B

fwerf30 Size: - Virtual size: 2.2MB

fwerf31 Size: 3KB - Virtual size: 2KB

fwerf32 Size: 4.3MB - Virtual size: 4.3MB

.reloc Size: 512B - Virtual size: 60B

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: - Virtual size: 2.5MB

.rdata
Size: - Virtual size: 186KB

.data
Size: - Virtual size: 66KB

.pdata
Size: - Virtual size: 13KB

_RDATA
Size: - Virtual size: 244B

fwerf30
Size: - Virtual size: 2.2MB

fwerf31
Size: 3KB - Virtual size: 2KB

fwerf32
Size: 4.3MB - Virtual size: 4.3MB

.reloc
Size: 512B - Virtual size: 60B

.rsrc
Size: 68KB - Virtual size: 67KB