file[.]exe | Triage™

General

Target
file.exe
Size 361KB
Sample230105-ha681sbb33
SHA256 c0bbb556f5f3c43c100a68d34ecd1a19f8b5afe3675836cf8cd5eb29afa7cc72
MD5 0dcc41cf799786d7a0ebcb8fb13a5160
SHA1 6c0f35c5b722ec633d9c912438e997051d518126
SHA512 97a88bf044cdd2866370a79ece371b850b71dfd31f0d710d26baa51a7ddb1836ee101c5f51f8950c3ffd2ea399fa94f464dffcad97970f189f221f1627c4e4c0
SSDEEP 6144:BzLTlPKkziaSlVbeoh/bLkOStFzIzcszVg0VSjUs:BzflPKbVy0/bLTSrIzcspCU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 361KB

file.exe

IMPHASH 7bca87c7309353055aed194207c93e99
SHA256 c0bbb556f5f3c43c100a68d34ecd1a19f8b5afe3675836cf8cd5eb29afa7cc72
MD5 0dcc41cf799786d7a0ebcb8fb13a5160
SHA1 6c0f35c5b722ec633d9c912438e997051d518126
SHA512 97a88bf044cdd2866370a79ece371b850b71dfd31f0d710d26baa51a7ddb1836ee101c5f51f8950c3ffd2ea399fa94f464dffcad97970f189f221f1627c4e4c0
SSDEEP 6144:BzLTlPKkziaSlVbeoh/bLkOStFzIzcszVg0VSjUs:BzflPKbVy0/bLTSrIzcspCU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24590

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasW GetModuleHandleW CreateDirectoryExW ReadConsoleInputW GetTempPathW GetSystemDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA SetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeA LocalShrink GlobalFlags _llseek UpdateResourceA CreateActCtxW CopyFileW AddConsoleAliasW CreateMutexA GetCurrentActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess RtlCaptureContext InterlockedCompareExchange GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode InterlockedExchangeAdd MoveFileWithProgressA GetTickCount SetLastError GetPrivateProfileStructW VerSetConditionMask LoadLibraryA GetLastError DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

gdi32

SetBrushOrgEx

Sharing