file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 194KB
Sample230122-3m96nacb2w
SHA256 cc9dfbfd2fde476496058e07b74943b3bb268fdcb544872dd38d9203b4798a9f
MD5 aad2e1f69861d8679db2e5d72efef7f8
SHA1 37b08a346b3b49e5a2b7972269ca5fbc8c57feca
SHA512 b01a13c3418dd234f4086fb9f0a2034fe27161f47624b950ef228ec72ff8815603db06ddfbd9ac00794bf63bcc420f70c847265696274b75d2031f73884e6415
SSDEEP 3072:VBN0XF4K6KBLxxwT1F36A5frE+vbPjjx9+5VqDiz53tes0+b8ANb:7i1LxxwTn36IrfPjjieypb8AN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH 7b7e31d957f601e434be9d13b5a3cd6e
SHA256 cc9dfbfd2fde476496058e07b74943b3bb268fdcb544872dd38d9203b4798a9f
MD5 aad2e1f69861d8679db2e5d72efef7f8
SHA1 37b08a346b3b49e5a2b7972269ca5fbc8c57feca
SHA512 b01a13c3418dd234f4086fb9f0a2034fe27161f47624b950ef228ec72ff8815603db06ddfbd9ac00794bf63bcc420f70c847265696274b75d2031f73884e6415
SSDEEP 3072:VBN0XF4K6KBLxxwT1F36A5frE+vbPjjx9+5VqDiz53tes0+b8ANb:7i1LxxwTn36IrfPjjieypb8AN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31393

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesW CreateMutexW GetLastError LoadLibraryW SetCommMask LocalUnlock GetUserDefaultLangID TerminateProcess LocalFlags GetModuleHandleA CreateFileA GetVolumePathNameA FindVolumeMountPointClose lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleCtrlHandler CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW PulseEvent GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA EnumTimeFormatsW VerifyVersionInfoW FindNextFileW InterlockedCompareExchange GetConsoleAliasW FreeLibraryAndExitThread GetTempFileNameA GetConsoleAliasesLengthA LoadLibraryA CloseHandle HeapSize HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetCaretBlinkTime

gdi32

GetBrushOrgEx GetCharWidthA

shell32

FindExecutableW

msimg32

AlphaBlend