file[.]exe | Triage™

General

Target
file.exe
Size 209KB
Sample230105-hlxtqaef31
SHA256 ebfcf679363659ae76c7194c1866c37e2308d4ce27276f2ec7ff6aebb4f245f0
MD5 88acb7ebda96ae4b5b0ebfd4ecfec8b4
SHA1 a6e16fbf8e620d519e5b10df24936d14cea975c3
SHA512 fb6c39f997247fa78b461a80ee79fdaf137bdbad58e63f1aa7e3129a6d4c07bc918b1ad8941c85aec6490f2453877b809c2184d6f17d0845a9d382a1ace7bc02
SSDEEP 3072:iXKXfvOILkcfh+2/45kzeWcXiqsfhTrejEDZp8mcTdxZvPArl:ii7LkN2/sbXiqsfInFI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 209KB

file.exe

IMPHASH 7bca87c7309353055aed194207c93e99
SHA256 ebfcf679363659ae76c7194c1866c37e2308d4ce27276f2ec7ff6aebb4f245f0
MD5 88acb7ebda96ae4b5b0ebfd4ecfec8b4
SHA1 a6e16fbf8e620d519e5b10df24936d14cea975c3
SHA512 fb6c39f997247fa78b461a80ee79fdaf137bdbad58e63f1aa7e3129a6d4c07bc918b1ad8941c85aec6490f2453877b809c2184d6f17d0845a9d382a1ace7bc02
SSDEEP 3072:iXKXfvOILkcfh+2/45kzeWcXiqsfhTrejEDZp8mcTdxZvPArl:ii7LkN2/sbXiqsfInFI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24606

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasW GetModuleHandleW CreateDirectoryExW ReadConsoleInputW GetTempPathW GetSystemDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA SetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeA LocalShrink GlobalFlags _llseek UpdateResourceA CreateActCtxW CopyFileW AddConsoleAliasW CreateMutexA GetCurrentActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess RtlCaptureContext InterlockedCompareExchange GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode InterlockedExchangeAdd MoveFileWithProgressA GetTickCount SetLastError GetPrivateProfileStructW VerSetConditionMask LoadLibraryA GetLastError DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

gdi32

SetBrushOrgEx

Sharing