file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 328KB
Sample230119-rwvxjsgc29
SHA256 7feb20f3a7ff3dc49c8085ff2dce874da366e229c08ca22ff2a07a938c4f9605
MD5 78aafc6e179336023919eb86976bae4f
SHA1 1fe1b2f4fcb9953475b65549118fec1ac66d883b
SHA512 90e38d1e604651a6d2d88947296ac73bcb2a2904c36b515dcd3ce722f5c117723df527a202d06e6523b7fb97b279e23356892e376169007dd6071d558e54bfc1
SSDEEP 6144:XSDZQFIztrb/FijERK+PpfCrao8tQQsif:XS1QyzZ9pPMaogQH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 328KB

file.exe

IMPHASH 04b805471fc62700f7dfdfc04af9df90
SHA256 7feb20f3a7ff3dc49c8085ff2dce874da366e229c08ca22ff2a07a938c4f9605
MD5 78aafc6e179336023919eb86976bae4f
SHA1 1fe1b2f4fcb9953475b65549118fec1ac66d883b
SHA512 90e38d1e604651a6d2d88947296ac73bcb2a2904c36b515dcd3ce722f5c117723df527a202d06e6523b7fb97b279e23356892e376169007dd6071d558e54bfc1
SSDEEP 6144:XSDZQFIztrb/FijERK+PpfCrao8tQQsif:XS1QyzZ9pPMaogQH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27087

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA CreateFileW GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW CreateNamedPipeW GetProcessPriorityBoost GetModuleHandleA DeleteFileW DosDateTimeToFileTime lstrlenA TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA ResetEvent CreateMailslotA WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsW FindNextFileA FreeEnvironmentStringsA VerifyVersionInfoW GetConsoleAliasW CreateFileA GetNumberOfConsoleInputEvents GetConsoleTitleW GlobalFlags LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA DeleteFileA

user32

GetMessageExtraInfo

gdi32

GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCloseHandle

msimg32

TransparentBlt