file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 175KB
Sample230119-rrve8agb98
SHA256 31bb59cbddf3d8ee2b6237d30180c4f457bef9e499389c4c8f405ac0b7da0ccb
MD5 4dc38bf9040a76450d202fc530401094
SHA1 856863508f03924c3f2fa4a6c87fa4f24db2a2bf
SHA512 2ff1cdcfaff47e9aea9d8b4fbc7ee9e2f947e1d5454645f9f4d1b14c09e47dc3eae1c06ed4791099d25a17d2cf68f1a66f443b896d7db2f256e177ce1f1cfce8
SSDEEP 3072:rXEANa1RWMnKVGGZol5zojY+10n8bpJ13GqkDVrPuf0:DRadiZo7oc+K8bp32qqrmf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 175KB

file.exe

IMPHASH 04b805471fc62700f7dfdfc04af9df90
SHA256 31bb59cbddf3d8ee2b6237d30180c4f457bef9e499389c4c8f405ac0b7da0ccb
MD5 4dc38bf9040a76450d202fc530401094
SHA1 856863508f03924c3f2fa4a6c87fa4f24db2a2bf
SHA512 2ff1cdcfaff47e9aea9d8b4fbc7ee9e2f947e1d5454645f9f4d1b14c09e47dc3eae1c06ed4791099d25a17d2cf68f1a66f443b896d7db2f256e177ce1f1cfce8
SSDEEP 3072:rXEANa1RWMnKVGGZol5zojY+10n8bpJ13GqkDVrPuf0:DRadiZo7oc+K8bp32qqrmf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27087

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA CreateFileW GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW CreateNamedPipeW GetProcessPriorityBoost GetModuleHandleA DeleteFileW DosDateTimeToFileTime lstrlenA TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA ResetEvent CreateMailslotA WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsW FindNextFileA FreeEnvironmentStringsA VerifyVersionInfoW GetConsoleAliasW CreateFileA GetNumberOfConsoleInputEvents GetConsoleTitleW GlobalFlags LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA DeleteFileA

user32

GetMessageExtraInfo

gdi32

GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCloseHandle

msimg32

TransparentBlt