file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 192KB
Sample230120-abf48aef8y
SHA256 d6ae467e379a550024b4dc4a6bba9aaed48532eede4d7175447c821d79fac2d5
MD5 f47eff39fbf42b8c66967bd2d5e53e98
SHA1 4f516b5c87846077df9f58814f576d33b899d752
SHA512 5399155227322c8d98f25e706bf62b5196af731fc2ce174a44a6b59c8636eddad0b49c22e18e71eae4f96731e4f12d5ecda1cc591bf95910cf46416828ba8ebc
SSDEEP 3072:gBN4X3Fqr6bqiQp6sdKr/v5n95wXdwJVTN+DWE/Pgu35sG0VP:IqS6h6dKr/NggBbuPnsG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 192KB

file.exe

IMPHASH b7fe544335f8a4238fde8ffc9deb4a27
SHA256 d6ae467e379a550024b4dc4a6bba9aaed48532eede4d7175447c821d79fac2d5
MD5 f47eff39fbf42b8c66967bd2d5e53e98
SHA1 4f516b5c87846077df9f58814f576d33b899d752
SHA512 5399155227322c8d98f25e706bf62b5196af731fc2ce174a44a6b59c8636eddad0b49c22e18e71eae4f96731e4f12d5ecda1cc591bf95910cf46416828ba8ebc
SSDEEP 3072:gBN4X3Fqr6bqiQp6sdKr/v5n95wXdwJVTN+DWE/Pgu35sG0VP:IqS6h6dKr/NggBbuPnsG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31622

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessPriorityBoost GetConsoleAliasA CreateFileW GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW CreateNamedPipeW LocalFlags GetModuleHandleA GetConsoleAliasesLengthW CreateFileA GetVolumePathNameW ProcessIdToSessionId OpenFileMappingW lstrcmpW AddRefActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynW GenerateConsoleCtrlEvent CopyFileW DosDateTimeToFileTime TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW ResetEvent CreateMailslotA WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsA FindNextFileA VerifyVersionInfoA GetConsoleAliasW GetNumberOfConsoleInputEvents GetConsoleTitleW GetVolumeNameForVolumeMountPointW LoadLibraryA CloseHandle MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize DeleteFileA

gdi32

GetBrushOrgEx

advapi32

SetThreadToken

shell32

FindExecutableA

msimg32

AlphaBlend