file[.]exe | Triage™

Resubmissions

19/04/2023, 17:04

230419-vld3tscb75

19/04/2023, 14:06

230419-red8gacg7x10

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 346KB
Sample230419-red8gacg7x
SHA256 8e2c24992e272ae9bd921ce4a96c3c42c8c80b69c615a4570efc06f52f151855
MD5 b65304374c80921e649d272984a0fb4a
SHA1 8ee64fdda12d8bd5386182fb4d6b85e7d8d5a209
SHA512 37f02ba16e9ada335a066b73f71a2c5cd5f4f5ebf4d5fa147eae2e2da5578676ce6f72e55f38b25608b26be7d611e80b2df83881f9a18fbcfa9c93f928dfb898
SSDEEP 6144:Grq9t3BXZzXdiCJmipOpNldW/1Fm/gJYPDWJ:oq9xBJwCJmi+1e
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 346KB

file.exe

IMPHASH 53fd62b154356df996eb71685adbd3f9
SHA256 8e2c24992e272ae9bd921ce4a96c3c42c8c80b69c615a4570efc06f52f151855
MD5 b65304374c80921e649d272984a0fb4a
SHA1 8ee64fdda12d8bd5386182fb4d6b85e7d8d5a209
SHA512 37f02ba16e9ada335a066b73f71a2c5cd5f4f5ebf4d5fa147eae2e2da5578676ce6f72e55f38b25608b26be7d611e80b2df83881f9a18fbcfa9c93f928dfb898
SSDEEP 6144:Grq9t3BXZzXdiCJmipOpNldW/1Fm/gJYPDWJ:oq9xBJwCJmi+1e
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18323

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnlockFile GetLogicalDrives GetModuleHandleW EnumTimeFormatsA EnumTimeFormatsW EnumResourceTypesA GlobalAlloc GetFileAttributesA FindNextVolumeW EnumSystemLocalesA GetCPInfoExW GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA CreateMemoryResourceNotification _hwrite LoadLibraryA InterlockedExchangeAdd CreateFileMappingA OpenEventA RemoveDirectoryW BeginUpdateResourceA PostQueuedCompletionStatus WriteProfileSectionW FindFirstChangeNotificationA VirtualProtect OpenEventW GetCPInfoExA GetWindowsDirectoryW AddConsoleAliasA EnumCalendarInfoExA TlsFree RaiseException ScrollConsoleScreenBufferW CopyFileExW WriteConsoleA GetConsoleAliasesLengthW MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc GetModuleHandleA RtlUnwind HeapSize

user32

CharLowerBuffW RegisterClassA

gdi32

GetCharWidthI GetCharWidthW

advapi32

LogonUserA

ole32

CoGetPSClsid