file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 195KB
Sample230122-sb6c8aab5s
SHA256 c8ecbd53f00218c14ea066848502f5828f7f77cde4fcee3b66e9c72088ab1ca8
MD5 0fdcad66f1f5b11696c1c7a45a718d1b
SHA1 0f5fb4d515777205e17272c7429ce9d991bda886
SHA512 1a457c714bb0e829fbc7352e966b77d4ad7eb06a2726162f9837ffe25c3e672aa7691a5a1fe7014beccd73dbbb031e3f20cdf7ad61d7be917938939380d85ad5
SSDEEP 3072:sBN0X6u+8uOH9LbA/Np5heCOMtZTtLxVBZDTSeCmT7wLRO:kiZdLbINdeCOMtZTtLXD+ex7w
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 195KB

file.exe

IMPHASH 69a547ca22ffbc28210038246e3232e6
SHA256 c8ecbd53f00218c14ea066848502f5828f7f77cde4fcee3b66e9c72088ab1ca8
MD5 0fdcad66f1f5b11696c1c7a45a718d1b
SHA1 0f5fb4d515777205e17272c7429ce9d991bda886
SHA512 1a457c714bb0e829fbc7352e966b77d4ad7eb06a2726162f9837ffe25c3e672aa7691a5a1fe7014beccd73dbbb031e3f20cdf7ad61d7be917938939380d85ad5
SSDEEP 3072:sBN0X6u+8uOH9LbA/Np5heCOMtZTtLxVBZDTSeCmT7wLRO:kiZdLbINdeCOMtZTtLXD+ex7w
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31329

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionStringW CreateFileA GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExW GetTempPathA GetCurrentDirectoryW DebugBreak LCMapStringW GetProcAddress GlobalAlloc SetVolumeMountPointW GetLastError LoadLibraryW SetCommMask LocalUnlock GetUserDefaultLangID GetConsoleAliasA TerminateProcess LocalFlags GetModuleHandleA GetConsoleAliasesLengthW RegisterWaitForSingleObject GlobalSize FindVolumeMountPointClose lstrcmpW ChangeTimerQueueTimer SetConsoleScreenBufferSize GetComputerNameW lstrcpynW SetConsoleCtrlHandler CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW PulseEvent LocalReAlloc WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoA FindNextFileW GetConsoleAliasW FreeLibraryAndExitThread GetNumberOfConsoleInputEvents GetVolumePathNameA LoadLibraryA CloseHandle HeapSize HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetCaretBlinkTime

gdi32

GetBrushOrgEx GetBoundsRect

shell32

FindExecutableA

msimg32

AlphaBlend