file[.]exe | Triage™

General

Target
file.exe
Size 364KB
Sample230105-2zjc2ade75
SHA256 a5f39e41cc22af7ff798c79cf4165a9f1f3978af156a5e673349e39dab6bbf49
MD5 6aec329c6991252670ad95e92d17dc8f
SHA1 8fe2c0571449b276f919cde1b5cc81aa071d29fb
SHA512 c01076bb4ccc14e6d8598efec280a40116a823ff6d47f3279884bd71439bec54f80c5b60e1d5a51ebf8e913436d3d136771cc1643a8b99337ad4b476541ff350
SSDEEP 6144:Gw5L7/OTY54gtu9ebosbVgHPZF9ZPQGlgMr5gjtOyzUs:z5v/MY54g08b7iZZDgrBJA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 364KB

file.exe

IMPHASH e4be47dc45c18a635c0849b7a5a99964
SHA256 a5f39e41cc22af7ff798c79cf4165a9f1f3978af156a5e673349e39dab6bbf49
MD5 6aec329c6991252670ad95e92d17dc8f
SHA1 8fe2c0571449b276f919cde1b5cc81aa071d29fb
SHA512 c01076bb4ccc14e6d8598efec280a40116a823ff6d47f3279884bd71439bec54f80c5b60e1d5a51ebf8e913436d3d136771cc1643a8b99337ad4b476541ff350
SSDEEP 6144:Gw5L7/OTY54gtu9ebosbVgHPZF9ZPQGlgMr5gjtOyzUs:z5v/MY54g08b7iZZDgrBJA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24431

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateDirectoryExW ReadConsoleInputA GetTempPathW GetCurrentDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA SetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags GetModuleHandleA UpdateResourceA CreateActCtxW CopyFileW InterlockedExchangeAdd GetConsoleAliasW VerSetConditionMask CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA ResetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess InterlockedDecrement GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError GetPrivateProfileStructA MoveFileWithProgressA LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

Sharing