file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 201KB
Sample230126-lcf2dsef4v
SHA256 8893d7689ef5ff71cfcaa7f5242caf2c80ead75171593c841ddffd799c388fb2
MD5 5138399605906d20f0d997f76a455305
SHA1 1c3d6a4e2e3c06654cd6ce9a63df125285cc39ec
SHA512 4a49b83fab98fa87e2d8cd762678dde14a60544f0eb6d403c558d74b949b6cdd58a5f1038841c07b52dc40ca98bd2eeb0dda67608c3d213605313a8259d052c1
SSDEEP 3072:IBN2H6HZdLltm80Gu5LgBmFlBWnDvQC8IBMQEd81KPO0x:w8SLS80GqFvAvQ+BMQtq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 201KB

file.exe

IMPHASH 2fb86d3afd3014d2e2e15a2dd2f620c9
SHA256 8893d7689ef5ff71cfcaa7f5242caf2c80ead75171593c841ddffd799c388fb2
MD5 5138399605906d20f0d997f76a455305
SHA1 1c3d6a4e2e3c06654cd6ce9a63df125285cc39ec
SHA512 4a49b83fab98fa87e2d8cd762678dde14a60544f0eb6d403c558d74b949b6cdd58a5f1038841c07b52dc40ca98bd2eeb0dda67608c3d213605313a8259d052c1
SSDEEP 3072:IBN2H6HZdLltm80Gu5LgBmFlBWnDvQC8IBMQEd81KPO0x:w8SLS80GqFvAvQ+BMQtq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23684

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExW GlobalSize GetLogicalDriveStringsW ReadConsoleInputA GetComputerNameExA GetTempPathW GetCurrentDirectoryA WaitForDebugEvent LCMapStringW GetProcAddress GlobalAlloc GetCommandLineA GetBinaryTypeA InterlockedExchange ReadConsoleOutputCharacterA CreateMutexA GetConsoleTitleW SearchPathW ExpandEnvironmentStringsW FindResourceA GetLastError LoadLibraryW GetCommMask LocalReAlloc CreateFileA TerminateThread GlobalFlags GetConsoleAliasesLengthW DeleteVolumeMountPointA GetVolumePathNameW SetVolumeMountPointA lstrcmpA DeleteTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleTextAttribute CopyFileW FileTimeToDosDateTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW SetConsoleDisplayMode WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsA VerifyVersionInfoA FindNextFileA GetTickCount GetConsoleAliasA FreeLibraryAndExitThread GetComputerNameExW LoadLibraryA CloseHandle HeapSize ReadFile HeapFree MoveFileA DeleteFileA GetStartupInfoW GetModuleHandleA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetMessageExtraInfo

gdi32

GetCharWidthA

winhttp

WinHttpReadData

msimg32

TransparentBlt