file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 224KB
Sample230118-abf48aae84
SHA256 8e6c7c4199cb082688d633e1906052bd55261cc1010c9cf76d82c86ef4af36af
MD5 04726cc3f3f63ad1f25eede69f848321
SHA1 bd0dbb765a732902cfe941803e22b2ae2a7db7e5
SHA512 44f93ebdc1ba84be3ef1ca6437df8b895b721f958565a017e251c499499bb6f72b35ea22c96685eebd5d41d14bdfbf148aee55834e1cfaab1eaba19da1b7379c
SSDEEP 3072:XDX3/bCKEzKHG9PjP5h9I0ytefDCEOEU6iSXbcqt4qnA:X7T2PjFJDxUxSXAkL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 224KB

file.exe

IMPHASH 77e91aba7d98debeef9f5a1ea4146c09
SHA256 8e6c7c4199cb082688d633e1906052bd55261cc1010c9cf76d82c86ef4af36af
MD5 04726cc3f3f63ad1f25eede69f848321
SHA1 bd0dbb765a732902cfe941803e22b2ae2a7db7e5
SHA512 44f93ebdc1ba84be3ef1ca6437df8b895b721f958565a017e251c499499bb6f72b35ea22c96685eebd5d41d14bdfbf148aee55834e1cfaab1eaba19da1b7379c
SSDEEP 3072:XDX3/bCKEzKHG9PjP5h9I0ytefDCEOEU6iSXbcqt4qnA:X7T2PjFJDxUxSXAkL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34760

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputA GetComputerNameExW GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc GetBinaryTypeA IsDebuggerPresent VerifyVersionInfoA FindActCtxSectionStringA UnhandledExceptionFilter LocalFlags GetLastError CreateFileA CreateNamedPipeA GlobalFlags GetModuleHandleA CopyFileW CreateActCtxW lstrlenA TlsGetValue CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW CreateMailslotA WriteConsoleInputW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileA FreeEnvironmentStringsW GetTickCount GetConsoleAliasW GetProcessPriorityBoost GetNumberOfConsoleInputEvents GetConsoleTitleA LoadLibraryW LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP WriteConsoleA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter RaiseException RtlUnwind MultiByteToWideChar WideCharToMultiByte GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount DeleteFileA

user32

GetMessageExtraInfo GetMenuInfo

gdi32

GetCharWidth32A GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCreateUrl

msimg32

TransparentBlt