file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 194KB
Sample230122-1tw69shh47
SHA256 7b06eebcd73d04e73e153faa4e7f1df0b4108fa9079c90b885a1eee5b0761d68
MD5 3d70615433796bf2d2d7bf6da0de50a9
SHA1 2ef64c60cd47875a51c3d1a8314e264f32905fdc
SHA512 ad071a028ae5bef601c294c3b83c7d74183c085518e759c98b87eaa547b16d0cc7e7c30ee3d2a3948ef76f62c6a483e1d0024f03989437e07c67585e73ce2444
SSDEEP 3072:2BN0Xq/K/VLj7dFfRs5LwEmEHJ+5zNKjaEl0F1jcrNj34C4Ia:KiHLj7d1R17kA7Kj7SfwrNjIV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH b8388c4af61e6ca4e78048b4b09a8cbe
SHA256 7b06eebcd73d04e73e153faa4e7f1df0b4108fa9079c90b885a1eee5b0761d68
MD5 3d70615433796bf2d2d7bf6da0de50a9
SHA1 2ef64c60cd47875a51c3d1a8314e264f32905fdc
SHA512 ad071a028ae5bef601c294c3b83c7d74183c085518e759c98b87eaa547b16d0cc7e7c30ee3d2a3948ef76f62c6a483e1d0024f03989437e07c67585e73ce2444
SSDEEP 3072:2BN0Xq/K/VLj7dFfRs5LwEmEHJ+5zNKjaEl0F1jcrNj34C4Ia:KiHLj7d1R17kA7Kj7SfwrNjIV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31233

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExW GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesW CreateMutexW FindActCtxSectionStringW GetLastError LoadLibraryW SetCommMask LocalUnlock GetUserDefaultLangID GetConsoleAliasA TerminateProcess LocalFlags CreateFileA GetConsoleAliasesLengthW GetVolumePathNameA FindVolumeMountPointClose lstrcmpA ChangeTimerQueueTimer SetConsoleScreenBufferSize GetComputerNameW lstrcpynW SetConsoleCtrlHandler CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW PulseEvent GetConsoleProcessList WriteConsoleInputW WritePrivateProfileStructA EnumTimeFormatsW VerifyVersionInfoW FindNextFileW InterlockedCompareExchange GetConsoleAliasW FreeLibraryAndExitThread GetNumberOfConsoleInputEvents GetModuleHandleA LoadLibraryA CloseHandle HeapSize HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetCaretBlinkTime

gdi32

GetBrushOrgEx GetBoundsRect

shell32

FindExecutableA

msimg32

AlphaBlend