file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 328KB
Sample230119-jcy6vsfd45
SHA256 ca85cdc41f74500ba622acaa0801f995ab4fc4d5d7bf3c53dd6f11cefe0e2ae9
MD5 49d1ebbe8d0ccd70542ef3653c67229b
SHA1 ced171d574328839c73dde57f5697d28d7147a71
SHA512 3f374ee8d34b01e184114f2a99337d109f68ed6d3f962aa74602a9f8b0fc522718dca88770def195452275726a569dfa379e81faa5822bb4741e3f9f12559e08
SSDEEP 6144:bA1KUaSeDa6vuMCYhZCnUzU57dNf6rkfJmZsRBcsYo:bAMPSu4MCeZqUQ7dNAk886bo
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH 00ddad892f8297a283e3a08b8010afa2
SHA256 ca85cdc41f74500ba622acaa0801f995ab4fc4d5d7bf3c53dd6f11cefe0e2ae9
MD5 49d1ebbe8d0ccd70542ef3653c67229b
SHA1 ced171d574328839c73dde57f5697d28d7147a71
SHA512 3f374ee8d34b01e184114f2a99337d109f68ed6d3f962aa74602a9f8b0fc522718dca88770def195452275726a569dfa379e81faa5822bb4741e3f9f12559e08
SSDEEP 6144:bA1KUaSeDa6vuMCYhZCnUzU57dNf6rkfJmZsRBcsYo:bAMPSu4MCeZqUQ7dNAk886bo
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26676

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc IsDebuggerPresent VerifyVersionInfoA FindActCtxSectionStringA GetLastError GetConsoleAliasW CreateNamedPipeW GlobalFlags GetModuleHandleA CopyFileW DosDateTimeToFileTime lstrlenA TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW CreateMailslotA WriteConsoleInputW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileA FreeEnvironmentStringsW GetProcessPriorityBoost GetNumberOfConsoleInputEvents GetConsoleTitleW LoadLibraryW LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP MultiByteToWideChar WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException VirtualAlloc HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA DeleteFileA

user32

GetMessageExtraInfo

gdi32

GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCreateUrl

msimg32

TransparentBlt