file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample230105-pna63afd61
SHA256 e975e50bca8e7cfed1b995e93c44873823ef8fdf30fce0b0c980ca4159458ee1
MD5 e9af36f4885c2635b694bae3cbb2f6f9
SHA1 aeb31b13de4c99cc8f635bb17c327a6ebb8682c5
SHA512 ad8d394bdf2c29cc514bf53311bd9f92d07a4ab8bfe6ba581d96a0d45c4ae29fd71138a54b2d6e85afb23bb337810c74dd85fcfa61849364b263bffb52535227
SSDEEP 3072:WXJaV7U0LKWcJUHV2y5DpQKN5nNSFJmU2h6+0mcTdLXl:+0LKmHV2GXsJIc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH b087f13dfcdc56918a6d05e7c3e9806f
SHA256 e975e50bca8e7cfed1b995e93c44873823ef8fdf30fce0b0c980ca4159458ee1
MD5 e9af36f4885c2635b694bae3cbb2f6f9
SHA1 aeb31b13de4c99cc8f635bb17c327a6ebb8682c5
SHA512 ad8d394bdf2c29cc514bf53311bd9f92d07a4ab8bfe6ba581d96a0d45c4ae29fd71138a54b2d6e85afb23bb337810c74dd85fcfa61849364b263bffb52535227
SSDEEP 3072:WXJaV7U0LKWcJUHV2y5DpQKN5nNSFJmU2h6+0mcTdLXl:+0LKmHV2GXsJIc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24702

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasW GetModuleHandleW CreateDirectoryExW ReadConsoleInputW GetTempPathW GetSystemDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA SetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeW LocalShrink GlobalFlags UpdateResourceA CreateActCtxW CopyFileW AddConsoleAliasW CreateMutexA GetCurrentActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess RtlCaptureContext GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode MoveFileWithProgressA InterlockedExchangeAdd GetTickCount SetLastError GetPrivateProfileStructA VerSetConditionMask LoadLibraryA GetLastError DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

gdi32

SetBrushOrgEx

Sharing