file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 195KB
Sample230123-df6gfsbf23
SHA256 3a2a6aecb0afe570b657255eb0d192d5ed3714c7156fc3ecb5e6f6589b2ca21c
MD5 669fa37dac6aa9eb55e12cb2587a9ac8
SHA1 bfca972268ece846cafd6d8a085443fae5785441
SHA512 63824eecc98202d995d770662782b2b0c9cc6c72b8e3911b82e18219b53d5cbb600093b2220d4aa619268c4bc5808f96ba419c39a72c9dc99cc5a86ed8b7f9f1
SSDEEP 3072:IBN0X++Lfv4LOBSQp95/0iz3nRuCWH881+jrCOaXhkvq85Li9:wi0LOBRpci7RdTnFaXhkvq8Bi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 195KB

file.exe

IMPHASH 7b7e31d957f601e434be9d13b5a3cd6e
SHA256 3a2a6aecb0afe570b657255eb0d192d5ed3714c7156fc3ecb5e6f6589b2ca21c
MD5 669fa37dac6aa9eb55e12cb2587a9ac8
SHA1 bfca972268ece846cafd6d8a085443fae5785441
SHA512 63824eecc98202d995d770662782b2b0c9cc6c72b8e3911b82e18219b53d5cbb600093b2220d4aa619268c4bc5808f96ba419c39a72c9dc99cc5a86ed8b7f9f1
SSDEEP 3072:IBN0X++Lfv4LOBSQp95/0iz3nRuCWH881+jrCOaXhkvq85Li9:wi0LOBRpci7RdTnFaXhkvq8Bi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31393

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesW CreateMutexW GetLastError LoadLibraryW SetCommMask LocalUnlock GetUserDefaultLangID TerminateProcess LocalFlags GetModuleHandleA CreateFileA GetVolumePathNameA FindVolumeMountPointClose lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleCtrlHandler CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW PulseEvent GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA EnumTimeFormatsW VerifyVersionInfoW FindNextFileW InterlockedCompareExchange GetConsoleAliasW FreeLibraryAndExitThread GetTempFileNameA GetConsoleAliasesLengthA LoadLibraryA CloseHandle HeapSize HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetCaretBlinkTime

gdi32

GetBrushOrgEx GetCharWidthA

shell32

FindExecutableW

msimg32

AlphaBlend