file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 186KB
Sample230119-mzktjacf71
SHA256 bd8f746d8a8277c72ddfd3aa3ce36dfa4c8994b9d4eb045861fb0b2fcba8d585
MD5 04ca7929536d08349c433e33695f0d41
SHA1 8ef64ec7f0971cdca1cf1e54a4a810a6b7781054
SHA512 1bbe09363cee49cc35c6a7539146ba73dfe5c840377282f50ef998e2f7f181173360a0e4785313ceaf48dbfdd658909c5a3f60b44a6526e9899b62df8a6754cd
SSDEEP 3072:fXEv38OmPa8hUDox5O4KKOhsBI9kQGhVXyLdabCX:PSWUDo+PsXGi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 186KB

file.exe

IMPHASH a8824569d6429cf5fad343946c43d951
SHA256 bd8f746d8a8277c72ddfd3aa3ce36dfa4c8994b9d4eb045861fb0b2fcba8d585
MD5 04ca7929536d08349c433e33695f0d41
SHA1 8ef64ec7f0971cdca1cf1e54a4a810a6b7781054
SHA512 1bbe09363cee49cc35c6a7539146ba73dfe5c840377282f50ef998e2f7f181173360a0e4785313ceaf48dbfdd658909c5a3f60b44a6526e9899b62df8a6754cd
SSDEEP 3072:fXEv38OmPa8hUDox5O4KKOhsBI9kQGhVXyLdabCX:PSWUDo+PsXGi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26612

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA CreateFileW GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW CreateNamedPipeW GetProcessPriorityBoost GetModuleHandleA DeleteFileW DosDateTimeToFileTime lstrlenA TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA ResetEvent CreateMailslotA WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsW FindNextFileA FreeEnvironmentStringsA VerifyVersionInfoW GetConsoleAliasW CreateFileA GetNumberOfConsoleInputEvents GetConsoleTitleW GlobalFlags LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP MultiByteToWideChar WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType DeleteCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException VirtualAlloc HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA DeleteFileA

user32

GetMessageExtraInfo

gdi32

GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCloseHandle

msimg32

TransparentBlt