file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 208KB
Sample230117-1srkdsgf87
SHA256 eb65443a50764458c31e3bb4bfc307f06a64f26fea6b69f062787d273f577b2d
MD5 141d06b627e543883ca128665e568182
SHA1 5b39b39e8bb714e711fdb02844fcf965d73c053e
SHA512 ce918cb99724271e934329429c9a38993587ccfeae4329ba10f90a165e6b1827a4773a38dca889c65d6835cfd44744084377ee89ab094944f60a659acb2c626f
SSDEEP 3072:naX321BRWbnk5/xRzg1LVxaK5MFHEZ81kv7V8d0t4qnA:n6pLoxRuxxT7NveEL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 208KB

file.exe

IMPHASH 3341a6887f004e4fc82a0c3b0aa46fde
SHA256 eb65443a50764458c31e3bb4bfc307f06a64f26fea6b69f062787d273f577b2d
MD5 141d06b627e543883ca128665e568182
SHA1 5b39b39e8bb714e711fdb02844fcf965d73c053e
SHA512 ce918cb99724271e934329429c9a38993587ccfeae4329ba10f90a165e6b1827a4773a38dca889c65d6835cfd44744084377ee89ab094944f60a659acb2c626f
SSDEEP 3072:naX321BRWbnk5/xRzg1LVxaK5MFHEZ81kv7V8d0t4qnA:n6pLoxRuxxT7NveEL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25650

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputA GetComputerNameExW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress GlobalAlloc GetBinaryTypeA IsDebuggerPresent VerifyVersionInfoA FindActCtxSectionStringA UnhandledExceptionFilter LocalFlags GetLastError GetConsoleAliasW CreateNamedPipeA GlobalFlags GetModuleHandleA CopyFileW CreateActCtxW lstrlenA TlsGetValue CreateActCtxA DeleteVolumeMountPointA GetTickCount MoveFileWithProgressW CreateMailslotA WriteConsoleInputW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileW FreeEnvironmentStringsW GetProcessPriorityBoost CreateFileW GetNumberOfConsoleInputEvents GetConsoleTitleA LoadLibraryW LoadLibraryA WriteConsoleW GetConsoleOutputCP WriteConsoleA MultiByteToWideChar WideCharToMultiByte SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount RaiseException DeleteFileA

user32

GetMessageExtraInfo GetMenuInfo

gdi32

GetCharWidth32A GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCreateUrl

msimg32

TransparentBlt