file[.]exe | Triage™

General

Target
file.exe
Size 187KB
Sample230103-c2fmgscf8v
SHA256 12cc22da6901d5fc26e8f2d3ee79a1c346f83a7ae43e25d1384e1df23d9adb69
MD5 ae6483c62cd0ca82e6eca27a41919bc9
SHA1 6190875b0c3a41055e6ef05c6d76390ebda977d2
SHA512 3cec5a13442d4a22e5a4188ce7000d3caf189609411cf6eda8895783e2eceb9fa8c1a90eb24e081dc3f5532395a8bd11eafee4732cc386ac6b1be8def8d242a6
SSDEEP 3072:HQ3QXLIu2s+5uuICYP7Ti8k9iAqIflYInUS3ZhdMufL:wSLmskY/i8iiAqW3RrdMuT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 187KB

file.exe

IMPHASH 5ce74fadc962100e747ed614a1788497
SHA256 12cc22da6901d5fc26e8f2d3ee79a1c346f83a7ae43e25d1384e1df23d9adb69
MD5 ae6483c62cd0ca82e6eca27a41919bc9
SHA1 6190875b0c3a41055e6ef05c6d76390ebda977d2
SHA512 3cec5a13442d4a22e5a4188ce7000d3caf189609411cf6eda8895783e2eceb9fa8c1a90eb24e081dc3f5532395a8bd11eafee4732cc386ac6b1be8def8d242a6
SSDEEP 3072:HQ3QXLIu2s+5uuICYP7Ti8k9iAqIflYInUS3ZhdMufL:wSLmskY/i8iiAqW3RrdMuT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17259

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetModuleHandleW CreateDirectoryExW ReadConsoleInputA GetTempPathW GetSystemDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoW SetProcessPriorityBoost EndUpdateResourceA FindNextFileA FindFirstVolumeA LocalShrink GlobalFlags _llseek UpdateResourceA CreateActCtxW CopyFileW AddConsoleAliasW CreateMutexA GetCurrentActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExW CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess RtlCaptureContext InterlockedCompareExchange GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsW SetErrorMode InterlockedExchangeAdd MoveFileWithProgressA GetTickCount SetLastError GetPrivateProfileStructW VerSetConditionMask LoadLibraryA GetLastError DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CloseHandle CreateFileA

gdi32

SetBrushOrgEx

Sharing