file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 201KB
Sample230126-l3cfwsdc59
SHA256 8a9b94d66d13ce33d3b6dcec52fc74501bdf6536fdb438e11a66c00d3ed0e809
MD5 09a0cb3a24b41bc88ad4e89bbc66b492
SHA1 4587378995be7068c587591933f38990fe5bee23
SHA512 8ed307902de3ca1dcc4d47f29fb4650de80fccd3775ae1c29f7039a75a2710f456e663493fcd82cf5e24bee79f0eb2e980652ab1527749879495634ef2c0ef48
SSDEEP 3072:hBN2VpCP1sLGZVUkTIf5s7xAFiE7htP63Ovjt53mU50ov:HdsLiUaIYiFimhtC+vjt5B0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 201KB

file.exe

IMPHASH 2fb86d3afd3014d2e2e15a2dd2f620c9
SHA256 8a9b94d66d13ce33d3b6dcec52fc74501bdf6536fdb438e11a66c00d3ed0e809
MD5 09a0cb3a24b41bc88ad4e89bbc66b492
SHA1 4587378995be7068c587591933f38990fe5bee23
SHA512 8ed307902de3ca1dcc4d47f29fb4650de80fccd3775ae1c29f7039a75a2710f456e663493fcd82cf5e24bee79f0eb2e980652ab1527749879495634ef2c0ef48
SSDEEP 3072:hBN2VpCP1sLGZVUkTIf5s7xAFiE7htP63Ovjt53mU50ov:HdsLiUaIYiFimhtC+vjt5B0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23684

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathW GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress GlobalAlloc GetCommandLineA GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathW ExpandEnvironmentStringsW FindResourceA GetLastError LoadLibraryW GetCommMask LocalReAlloc CreateFileA TerminateThread GlobalFlags GetConsoleAliasesLengthW DeleteVolumeMountPointA GetVolumePathNameW SetVolumeMountPointA lstrcmpA DeleteTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW SetConsoleDisplayMode WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoA FindNextFileA GetTickCount GetConsoleAliasA FreeLibraryAndExitThread GetComputerNameExW LoadLibraryA CloseHandle HeapSize ReadFile HeapFree MoveFileA DeleteFileA GetStartupInfoW GetModuleHandleA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageExtraInfo

gdi32

GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt