file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 377KB
Sample230118-av7fhsfe51
SHA256 2155d12ed7f614eb556c7b07b3370dda4892f4430fbf70445d0da48d365ab8e8
MD5 334011506a3c2112587752b0b96c59a1
SHA1 fdeede642d5e0c44ead69fbbc5b74c52e1e60667
SHA512 ddeea22dee732a41a85b10f7a7e5cbd8b7308378b07a4f1a8cc3d12e1132adf93f86f3cb9ed3a2fcd9f27e61e98021f152902de9475209dea086de534e9a40b4
SSDEEP 6144:a3didp4upSh30hOcMX+cf7w8ZQftmoEPWDEmnfVud+CO7P3AHlL:a30pr2EUcMOcxZitmNPWYGNud67/K
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 377KB

file.exe

IMPHASH 77e91aba7d98debeef9f5a1ea4146c09
SHA256 2155d12ed7f614eb556c7b07b3370dda4892f4430fbf70445d0da48d365ab8e8
MD5 334011506a3c2112587752b0b96c59a1
SHA1 fdeede642d5e0c44ead69fbbc5b74c52e1e60667
SHA512 ddeea22dee732a41a85b10f7a7e5cbd8b7308378b07a4f1a8cc3d12e1132adf93f86f3cb9ed3a2fcd9f27e61e98021f152902de9475209dea086de534e9a40b4
SSDEEP 6144:a3didp4upSh30hOcMX+cf7w8ZQftmoEPWDEmnfVud+CO7P3AHlL:a30pr2EUcMOcxZitmNPWYGNud67/K
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34760

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputA GetComputerNameExW GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc GetBinaryTypeA IsDebuggerPresent VerifyVersionInfoA FindActCtxSectionStringA UnhandledExceptionFilter LocalFlags GetLastError CreateFileA CreateNamedPipeA GlobalFlags GetModuleHandleA CopyFileW CreateActCtxW lstrlenA TlsGetValue CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW CreateMailslotA WriteConsoleInputW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileA FreeEnvironmentStringsW GetTickCount GetConsoleAliasW GetProcessPriorityBoost GetNumberOfConsoleInputEvents GetConsoleTitleA LoadLibraryW LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP WriteConsoleA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter RaiseException RtlUnwind MultiByteToWideChar WideCharToMultiByte GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount DeleteFileA

user32

GetMessageExtraInfo GetMenuInfo

gdi32

GetCharWidth32A GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCreateUrl

msimg32

TransparentBlt