file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 194KB
Sample230122-rlpmsagc68
SHA256 9f7538929d41e712d2f0af226ca663c890b07301140d8569f071a43815dd39b4
MD5 6a1361103c058c4bfc786b3d55330720
SHA1 692ba8c94a9badf1fd5922155642f95171ce8e83
SHA512 f0fe9bf8b000a9f41b3e3b5ade1202fff732e33d03bcab1112ed8fbe22654153a33f49fcbccd9d27e526c8f9f0d6ce1d88f15a4983e89c9e4ab03f3b1a30a65a
SSDEEP 3072:GBN0Xuk+vpiL9tSy05EsCPdjoOKMCZwyN5d:ai5L9cybRto1VZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH 69a547ca22ffbc28210038246e3232e6
SHA256 9f7538929d41e712d2f0af226ca663c890b07301140d8569f071a43815dd39b4
MD5 6a1361103c058c4bfc786b3d55330720
SHA1 692ba8c94a9badf1fd5922155642f95171ce8e83
SHA512 f0fe9bf8b000a9f41b3e3b5ade1202fff732e33d03bcab1112ed8fbe22654153a33f49fcbccd9d27e526c8f9f0d6ce1d88f15a4983e89c9e4ab03f3b1a30a65a
SSDEEP 3072:GBN0Xuk+vpiL9tSy05EsCPdjoOKMCZwyN5d:ai5L9cybRto1VZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31329

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionStringW CreateFileA GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringW GetProcAddress GlobalAlloc SetVolumeMountPointW GetLastError LoadLibraryW SetCommMask LocalUnlock GetUserDefaultLangID GetConsoleAliasA TerminateProcess LocalFlags GetModuleHandleA GetConsoleAliasesLengthW RegisterWaitForSingleObject GlobalSize FindVolumeMountPointClose lstrcmpW ChangeTimerQueueTimer SetConsoleScreenBufferSize GetComputerNameW lstrcpynW SetConsoleCtrlHandler CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW PulseEvent LocalReAlloc WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW FreeLibraryAndExitThread GetNumberOfConsoleInputEvents GetVolumePathNameA LoadLibraryA CloseHandle HeapSize HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetCaretBlinkTime

gdi32

GetBrushOrgEx GetBoundsRect

shell32

FindExecutableA

msimg32

AlphaBlend