file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 327KB
Sample230119-red8gagb67
SHA256 fbdf7b639d67af9344ed2d79e31142598fef0178b4ca80dfdb47d0d2d139ccce
MD5 f7c682f24d1bb4e14b58765e10e19da1
SHA1 3f407fcc473cd076d62ca93bd58fba2aa0cbffb8
SHA512 a6ac244641fdc7f4b91a6a63a3ecd4b18eacd81ff20d0d91786a37b7de1a1db2a4f4ce71b9853b9bc485e8686681cc55d0295b856e23b030751b62b7ae202d55
SSDEEP 6144:h69//vYukvOCldC8zz4l4X8QYP8TPILBR3zmBaMySCCv:h65/wvOGCDasNP8jIL/pMbCC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH 04b805471fc62700f7dfdfc04af9df90
SHA256 fbdf7b639d67af9344ed2d79e31142598fef0178b4ca80dfdb47d0d2d139ccce
MD5 f7c682f24d1bb4e14b58765e10e19da1
SHA1 3f407fcc473cd076d62ca93bd58fba2aa0cbffb8
SHA512 a6ac244641fdc7f4b91a6a63a3ecd4b18eacd81ff20d0d91786a37b7de1a1db2a4f4ce71b9853b9bc485e8686681cc55d0295b856e23b030751b62b7ae202d55
SSDEEP 6144:h69//vYukvOCldC8zz4l4X8QYP8TPILBR3zmBaMySCCv:h65/wvOGCDasNP8jIL/pMbCC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27087

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA CreateFileW GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW CreateNamedPipeW GetProcessPriorityBoost GetModuleHandleA DeleteFileW DosDateTimeToFileTime lstrlenA TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA ResetEvent CreateMailslotA WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsW FindNextFileA FreeEnvironmentStringsA VerifyVersionInfoW GetConsoleAliasW CreateFileA GetNumberOfConsoleInputEvents GetConsoleTitleW GlobalFlags LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA DeleteFileA

user32

GetMessageExtraInfo

gdi32

GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCloseHandle

msimg32

TransparentBlt