file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 198KB
Sample230308-yvdp7sff91
SHA256 f1ad2e8d7faf26ebae0dd8d04205f5ae51e220b25d73937f420f80bebcd2b46c
MD5 177007f68ee1b8fec18ffa61b4bf8faf
SHA1 f85bb0eb619e1a6e95f0630f230607889f3f7a09
SHA512 4155e0f2eeb8e0777fc987a8c88f2beebf78ce5326dc49dc4544c65f1d84efe229730d9fc7270988ffa953069c854c7e029b268aebf97d2046a74fe3e88f6d6f
SSDEEP 3072:QwXr7Uqowy0DtAi7FecMMx35QvqhifCBSVGipPlolWkF:NPVoR0DHecxx5WfGSVGII
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

file.exe

.exe 198KB

file.exe

IMPHASH 9d87275419603abb20f5f1f078df04ba
SHA256 f1ad2e8d7faf26ebae0dd8d04205f5ae51e220b25d73937f420f80bebcd2b46c
MD5 177007f68ee1b8fec18ffa61b4bf8faf
SHA1 f85bb0eb619e1a6e95f0630f230607889f3f7a09
SHA512 4155e0f2eeb8e0777fc987a8c88f2beebf78ce5326dc49dc4544c65f1d84efe229730d9fc7270988ffa953069c854c7e029b268aebf97d2046a74fe3e88f6d6f
SSDEEP 3072:QwXr7Uqowy0DtAi7FecMMx35QvqhifCBSVGipPlolWkF:NPVoR0DHecxx5WfGSVGII
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16353

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetWindowsDirectoryA FindFirstVolumeMountPointA ReleaseSemaphore ReadConsoleInputW VerifyVersionInfoA GetCPInfoExA CreateEventW GetSystemDirectoryW GetProcAddress GetModuleHandleA LocalAlloc SetWaitableTimer DeleteFileA EnumResourceTypesA GetModuleHandleW SetThreadLocale GetComputerNameExA GetConsoleAliasA WriteProfileSectionA GetLastError WriteConsoleInputW AssignProcessToJobObject SetCalendarInfoW QueryInformationJobObject GetComputerNameW EnumTimeFormatsA AddAtomA SetSystemTime _llseek FindNextFileW FoldStringW GetShortPathNameA EnumCalendarInfoA EnumCalendarInfoExA GlobalAlloc CreateActCtxW GetConsoleCursorInfo CloseHandle ReadFile WriteConsoleW HeapSize FillConsoleOutputAttribute LoadLibraryW WideCharToMultiByte HeapReAlloc HeapAlloc MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW Sleep IsProcessorFeaturePresent SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind CreateFileW

user32

LoadMenuW GetMenuInfo GetListBoxInfo

gdi32

GetCharWidth32A

shell32

FindExecutableA

winhttp

WinHttpReadData