file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 195KB
Sample230121-fdzx1acd7v
SHA256 2c3b67f661fc9ef1a6257da2e39f31bb69592d3abf5f97f6e7d5d7b07a28cf14
MD5 7e43de3c9c334f9e77a6a48850c38552
SHA1 c29eaada9fb19bfa4fd0a4a405d8f0bc9d5941e8
SHA512 ac00f1f432e9833241eaf325e6916f18b65be662e2e1afdf05a1d9d8f131700452e6b40086974742a7f1859182294e95d3dc0cb525b7478e3bbf9af39d75f390
SSDEEP 3072:aBN4X3QoQA2BtkBRLkQ3rP152dqthojOs+Q3Cb0jrTiWC:umvQA9RLfrPOdqzds+Qyb0nr
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 195KB

file.exe

IMPHASH 4ad169539e30f4fdc9cb467ca358dbdb
SHA256 2c3b67f661fc9ef1a6257da2e39f31bb69592d3abf5f97f6e7d5d7b07a28cf14
MD5 7e43de3c9c334f9e77a6a48850c38552
SHA1 c29eaada9fb19bfa4fd0a4a405d8f0bc9d5941e8
SHA512 ac00f1f432e9833241eaf325e6916f18b65be662e2e1afdf05a1d9d8f131700452e6b40086974742a7f1859182294e95d3dc0cb525b7478e3bbf9af39d75f390
SSDEEP 3072:aBN4X3QoQA2BtkBRLkQ3rP152dqthojOs+Q3Cb0jrTiWC:umvQA9RLfrPOdqzds+Qyb0nr
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32370

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExW GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW SetCommMask LocalUnlock GetSystemDefaultLangID GetConsoleAliasA TerminateProcess LocalFlags GetModuleHandleA GetConsoleAliasesLengthW GetSystemWindowsDirectoryW GetVolumePathNameW ProcessIdToSessionId OpenFileMappingW lstrcmpW DeleteTimerQueueTimer SetConsoleScreenBufferSize GetComputerNameW lstrcpynW GenerateConsoleCtrlEvent CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW ResetEvent CreateMailslotA WriteConsoleInputW InterlockedCompareExchange EnumTimeFormatsA FindNextFileA VerifyVersionInfoA GetConsoleAliasW CreateFileA GetProcessPriorityBoost GetSystemTimeAdjustment GetConsoleTitleW GetNumberOfConsoleInputEvents GetVolumeNameForVolumeMountPointW LoadLibraryA CloseHandle HeapSize ReadFile WriteConsoleW GetConsoleOutputCP WriteConsoleA MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode RaiseException FlushFileBuffers SetStdHandle

user32

GetCaretBlinkTime

gdi32

GetBrushOrgEx GetBoundsRect

advapi32

AbortSystemShutdownW SetThreadToken InitiateSystemShutdownA

shell32

FindExecutableA

winhttp

WinHttpReadData

msimg32

AlphaBlend