file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 195KB
Sample230123-ejgsyadd5y
SHA256 4cb8050b1a3d665fbe9c75e557fa6704055427c6d2f76ef98f36ccba95a2a721
MD5 1372a5a0bdaf5497f90aa854b584879d
SHA1 74c9d1faed5787c79702570d78a80455710d9f3e
SHA512 22e6119317b5f4abcfbfa5bec59fd46711ba4a5b0a9c47a2dc296d7f2c80e7b2aec2d5d1d21312d75b0954380384dcb993d73dc3e81e2abb86691c403fa035bb
SSDEEP 3072:zBN0XC9Iu84BGLUET1hj5T7TMvryz83VMrStElt9CJWCKFkIi:9izLlhhJ7YOzq4lt9CRKeI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 195KB

file.exe

IMPHASH 7b7e31d957f601e434be9d13b5a3cd6e
SHA256 4cb8050b1a3d665fbe9c75e557fa6704055427c6d2f76ef98f36ccba95a2a721
MD5 1372a5a0bdaf5497f90aa854b584879d
SHA1 74c9d1faed5787c79702570d78a80455710d9f3e
SHA512 22e6119317b5f4abcfbfa5bec59fd46711ba4a5b0a9c47a2dc296d7f2c80e7b2aec2d5d1d21312d75b0954380384dcb993d73dc3e81e2abb86691c403fa035bb
SSDEEP 3072:zBN0XC9Iu84BGLUET1hj5T7TMvryz83VMrStElt9CJWCKFkIi:9izLlhhJ7YOzq4lt9CRKeI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31393

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesW CreateMutexW GetLastError LoadLibraryW SetCommMask LocalUnlock GetUserDefaultLangID TerminateProcess LocalFlags GetModuleHandleA CreateFileA GetVolumePathNameA FindVolumeMountPointClose lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameW lstrcpynW SetConsoleCtrlHandler CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW PulseEvent GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA EnumTimeFormatsW VerifyVersionInfoW FindNextFileW InterlockedCompareExchange GetConsoleAliasW FreeLibraryAndExitThread GetTempFileNameA GetConsoleAliasesLengthA LoadLibraryA CloseHandle HeapSize HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetCaretBlinkTime

gdi32

GetBrushOrgEx GetCharWidthA

shell32

FindExecutableW

msimg32

AlphaBlend