file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 226KB
Sample230118-bg8bbsdf23
SHA256 2d93aeddfa6c834e6cc0b1d6f31ab553dfc9bbd9e702e922ea576d4e8333c773
MD5 caa2990b299e987f7d43ed5b7e0455df
SHA1 95046258efd530ffa317aa4ab7141ded741580ba
SHA512 25b9244334056cef31cfcb23f21490a1987e7d8d1eb46a8b5523382dd470c478bc7be0fe03d0c91b7dc82ccad44f0f490e7b850f14506f2f7f339fdd120cb783
SSDEEP 3072:geFX3VCDEh1XPYojMSXjT52uy0LLYLJ51lBAzWZWrLVhbAV4hdePGmlCt4qnA:nBb9PYowSX/v81lmqW/V1Aadal8L
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 226KB

file.exe

IMPHASH e4608a47c9d33cc04c7ebef1e7d1e8d0
SHA256 2d93aeddfa6c834e6cc0b1d6f31ab553dfc9bbd9e702e922ea576d4e8333c773
MD5 caa2990b299e987f7d43ed5b7e0455df
SHA1 95046258efd530ffa317aa4ab7141ded741580ba
SHA512 25b9244334056cef31cfcb23f21490a1987e7d8d1eb46a8b5523382dd470c478bc7be0fe03d0c91b7dc82ccad44f0f490e7b850f14506f2f7f339fdd120cb783
SSDEEP 3072:geFX3VCDEh1XPYojMSXjT52uy0LLYLJ51lBAzWZWrLVhbAV4hdePGmlCt4qnA:nBb9PYowSX/v81lmqW/V1Aadal8L
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

35111

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputA GetComputerNameExW GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc GetBinaryTypeA IsDebuggerPresent VerifyVersionInfoA FindActCtxSectionStringA UnhandledExceptionFilter LocalFlags GetLastError CreateFileA CreateNamedPipeA GlobalFlags GetModuleHandleA CopyFileW CreateActCtxW lstrlenA TlsGetValue CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW CreateMailslotA WriteConsoleInputW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileA FreeEnvironmentStringsW GetTickCount GetConsoleAliasW GetProcessPriorityBoost GetNumberOfConsoleInputEvents GetConsoleTitleA LoadLibraryW LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP WriteConsoleA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter RaiseException RtlUnwind MultiByteToWideChar WideCharToMultiByte GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount DeleteFileA

user32

GetMessageExtraInfo GetMenuInfo

gdi32

GetCharWidth32A GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCreateUrl

msimg32

TransparentBlt