file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 196KB
Sample230121-mkxvjsdf6s
SHA256 665b390750d3171dd58391fc32be89ad913ef74cfafb98a78f1ea3b5f852ed39
MD5 ceca20b2d4144c11cf0cc8d4218d9a74
SHA1 2a10750bd26d67b73b2f8dddfe2593c6a2e44261
SHA512 351ff578c74f3ba3d1e9e79bb83d94e51694fe6ef08a6bbc001017d12afb74a35fc172ccc9f232fd054a207500246aac0885c70081144673e2d296f9980ea46f
SSDEEP 3072:MBN4X35gPkBpADlL/hK57F5rQOrRs+OR4SCkvdG5bAEehlyt4:Em6PZlLw57EO4yJIdYANh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 196KB

file.exe

IMPHASH 91a214f82670bcbe86e57a66b7d1a23c
SHA256 665b390750d3171dd58391fc32be89ad913ef74cfafb98a78f1ea3b5f852ed39
MD5 ceca20b2d4144c11cf0cc8d4218d9a74
SHA1 2a10750bd26d67b73b2f8dddfe2593c6a2e44261
SHA512 351ff578c74f3ba3d1e9e79bb83d94e51694fe6ef08a6bbc001017d12afb74a35fc172ccc9f232fd054a207500246aac0885c70081144673e2d296f9980ea46f
SSDEEP 3072:MBN4X35gPkBpADlL/hK57F5rQOrRs+OR4SCkvdG5bAEehlyt4:Em6PZlLw57EO4yJIdYANh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32418

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW ReleaseActCtx GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExW GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW SetCommMask LocalUnlock GetSystemDefaultLangID GetConsoleAliasA TerminateProcess LocalFlags GetModuleHandleA GetConsoleAliasesLengthW GetSystemWindowsDirectoryW GetVolumePathNameW ProcessIdToSessionId OpenFileMappingW lstrcmpW DeleteTimerQueueTimer SetConsoleScreenBufferSize GetComputerNameW lstrcpynW GenerateConsoleCtrlEvent CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW ResetEvent CreateMailslotA WriteConsoleInputW InterlockedCompareExchange EnumTimeFormatsA FindNextFileA VerifyVersionInfoA GetConsoleAliasW CreateFileA RegisterWaitForSingleObject GetSystemTimeAdjustment GetConsoleTitleW GetNumberOfConsoleInputEvents GetVolumeNameForVolumeMountPointW LoadLibraryA CloseHandle HeapSize ReadFile WriteConsoleW GetConsoleOutputCP WriteConsoleA MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode RaiseException FlushFileBuffers SetStdHandle

user32

GetCaretBlinkTime

gdi32

GetBrushOrgEx GetBoundsRect

advapi32

AbortSystemShutdownW SetThreadToken InitiateSystemShutdownA

shell32

FindExecutableA

winhttp

WinHttpReadData

msimg32

AlphaBlend