file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 176KB
Sample230124-vp83daed3x
SHA256 310ac971b8ebd9260248f2ff2f344f4d0711bf57c1759e9872b48d001d0b45cf
MD5 232ccde25361c7811e5f5343df4a978f
SHA1 ca5c7e2aed508cd98c1e188d582af828c37f881b
SHA512 b7125e2df5b8618c551862c04a3b34f5b2621455f122c4a1479988df3595b92bcdbb04da18a52fe5d416954ba006e2d722dd974f7c6c671dab1b583543b732a0
SSDEEP 3072:rBN2WJfEdLtaJZRq5Z57tYZTlfWeuKo6W8ePEsomNqCyKs7oKwR:ViLQZiv+hOJDt8ePZN1
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 176KB

file.exe

IMPHASH 39a12ed3ec7befeb872d2cda1d789974
SHA256 310ac971b8ebd9260248f2ff2f344f4d0711bf57c1759e9872b48d001d0b45cf
MD5 232ccde25361c7811e5f5343df4a978f
SHA1 ca5c7e2aed508cd98c1e188d582af828c37f881b
SHA512 b7125e2df5b8618c551862c04a3b34f5b2621455f122c4a1479988df3595b92bcdbb04da18a52fe5d416954ba006e2d722dd974f7c6c671dab1b583543b732a0
SSDEEP 3072:rBN2WJfEdLtaJZRq5Z57tYZTlfWeuKo6W8ePEsomNqCyKs7oKwR:ViLQZiv+hOJDt8ePZN1
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23108

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringW GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc CreateMutexA FindActCtxSectionStringA GetLastError LoadLibraryW GetCommMask LocalUnlock GetSystemDefaultLangID TerminateThread GlobalFlags GetModuleHandleA CreateFileA GetVolumePathNameW InterlockedCompareExchange SetVolumeMountPointW lstrcmpA DeleteTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA FileTimeToDosDateTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoA FindNextFileA GetTickCount GetConsoleAliasW FreeLibraryAndExitThread GetConsoleAliasesLengthW LoadLibraryA CloseHandle HeapSize HeapFree MoveFileA DeleteFileA GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetMessageExtraInfo

gdi32

GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt