file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 201KB
Sample230124-2fxrbaff6y
SHA256 fd81eb4c53e788ac14584f8fd628304c710db8f5cfe22a99aa4876f19d9858bf
MD5 fefc6a5766dfe04f4a3042b73cd47f3e
SHA1 32fd41126b0d48a90595b3d7d678c21681a8ac0c
SHA512 6bf90d7d893581d2facdf4d3c041d12e2e714111fc02d54b384020b772e446130d71105e9daa137c14a7607c8bcb1b37f978f3369eeb7200b101350bf1150543
SSDEEP 3072:2BN2RBJVLOPnWt5oTYX7Sp4jpsZvKzWu9UQAOIbaVkKzCCXaFCRn/wp:KwL+nWjmZVgUQAOIf80
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 201KB

file.exe

IMPHASH 0b7efb36250d99ac9280e9ab606e8d70
SHA256 fd81eb4c53e788ac14584f8fd628304c710db8f5cfe22a99aa4876f19d9858bf
MD5 fefc6a5766dfe04f4a3042b73cd47f3e
SHA1 32fd41126b0d48a90595b3d7d678c21681a8ac0c
SHA512 6bf90d7d893581d2facdf4d3c041d12e2e714111fc02d54b384020b772e446130d71105e9daa137c14a7607c8bcb1b37f978f3369eeb7200b101350bf1150543
SSDEEP 3072:2BN2RBJVLOPnWt5oTYX7Sp4jpsZvKzWu9UQAOIbaVkKzCCXaFCRn/wp:KwL+nWjmZVgUQAOIf80
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23108

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringW GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress GlobalAlloc CreateMutexA FindActCtxSectionStringA GetLastError LoadLibraryW GetCommMask LocalUnlock GetSystemDefaultLangID TerminateThread GlobalFlags GetModuleHandleA CreateFileA GetVolumePathNameW InterlockedCompareExchange SetVolumeMountPointW lstrcmpA DeleteTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA FileTimeToDosDateTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoA FindNextFileA GetTickCount GetConsoleAliasA FreeLibraryAndExitThread GetConsoleAliasesLengthW LoadLibraryA CloseHandle HeapSize ReadFile HeapFree MoveFileA DeleteFileA GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageExtraInfo

gdi32

GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt