file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 200KB
Sample230125-a1rx1sed37
SHA256 9cd1ae6e301120154f99d7e20c235f2e07a56d7b9102474c1bcffe610f3a3cc5
MD5 9fb6cf3c6b150052f272319937a42dd5
SHA1 7ca8492a30dfed1bd860dcad855f9474f7a9ad14
SHA512 ac4c8f16d09c0f2a3f38bbfca717eb485d08ae18f85461f5da369746c3e1f02f6341f7046b0579e68ad17158c7aae93f2624d5bfd41a1824607b1a9cf6889472
SSDEEP 3072:7LBN2kgE7/O9L3Y1nxZ52Pq0AHTxAWtkDE6ejT/zX+DZ3Tj:71N9ML2nxQqRGYkDH8/zk5v
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 200KB

file.exe

IMPHASH 5eb8e9ebd49d9ccce156e2e9eb6d0902
SHA256 9cd1ae6e301120154f99d7e20c235f2e07a56d7b9102474c1bcffe610f3a3cc5
MD5 9fb6cf3c6b150052f272319937a42dd5
SHA1 7ca8492a30dfed1bd860dcad855f9474f7a9ad14
SHA512 ac4c8f16d09c0f2a3f38bbfca717eb485d08ae18f85461f5da369746c3e1f02f6341f7046b0579e68ad17158c7aae93f2624d5bfd41a1824607b1a9cf6889472
SSDEEP 3072:7LBN2kgE7/O9L3Y1nxZ52Pq0AHTxAWtkDE6ejT/zX+DZ3Tj:71N9ML2nxQqRGYkDH8/zk5v
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23268

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringW GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW ReleaseActCtx GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathW GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress GlobalAlloc CreateMutexA FindActCtxSectionStringA GetLastError LoadLibraryW GetCommMask LocalUnlock GetSystemDefaultLangID TerminateThread GlobalFlags GetConsoleAliasesLengthW CreateFileA GetVolumePathNameW InterlockedCompareExchange SetVolumeMountPointA lstrcmpA DeleteTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleTextAttribute CopyFileA FileTimeToDosDateTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoA FindNextFileA GetTickCount GetConsoleAliasA FreeLibraryAndExitThread DeleteVolumeMountPointA LoadLibraryA CloseHandle HeapSize ReadFile HeapFree MoveFileA DeleteFileA GetStartupInfoW GetModuleHandleA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageExtraInfo

gdi32

GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt