file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 174KB
Sample230119-pbfk1scg71
SHA256 147e6f98daefb6fc15b8fa08a47c9c58268db79876a1c8b76f9c413fc42dd09b
MD5 674fa450acd1421d1212791e674bfd59
SHA1 ba0dbeb5f519ba3b1dc0916612e75c740cb26cc1
SHA512 9c1d3ca81f1f9d6a1d317db393176ad68cca5c01f087f7ab0f96f2696e8a74483b306383f3bda8afc96d0b54f406a692e62bf4a1880e40007226add455dbca43
SSDEEP 3072:qXEwVOE+b6g11ilPx5LgtysdqHHhb05r5MGiaZOSmd:KxW4lPngcTb05r5cuOS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 174KB

file.exe

IMPHASH a8824569d6429cf5fad343946c43d951
SHA256 147e6f98daefb6fc15b8fa08a47c9c58268db79876a1c8b76f9c413fc42dd09b
MD5 674fa450acd1421d1212791e674bfd59
SHA1 ba0dbeb5f519ba3b1dc0916612e75c740cb26cc1
SHA512 9c1d3ca81f1f9d6a1d317db393176ad68cca5c01f087f7ab0f96f2696e8a74483b306383f3bda8afc96d0b54f406a692e62bf4a1880e40007226add455dbca43
SSDEEP 3072:qXEwVOE+b6g11ilPx5LgtysdqHHhb05r5MGiaZOSmd:KxW4lPngcTb05r5cuOS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26612

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA CreateFileW GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW CreateNamedPipeW GetProcessPriorityBoost GetModuleHandleA DeleteFileW DosDateTimeToFileTime lstrlenA TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA ResetEvent CreateMailslotA WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsW FindNextFileA FreeEnvironmentStringsA VerifyVersionInfoW GetConsoleAliasW CreateFileA GetNumberOfConsoleInputEvents GetConsoleTitleW GlobalFlags LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP MultiByteToWideChar WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType DeleteCriticalSection GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException VirtualAlloc HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA DeleteFileA

user32

GetMessageExtraInfo

gdi32

GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCloseHandle

msimg32

TransparentBlt