file[.]exe | Triage™

General

Target
file.exe
Size 214KB
Sample230105-q4nyjacb74
SHA256 627304aa7e9cf1d57572fcf2a8a93a026a5c4b507c6e57f7ee2f3d3d27fabcd4
MD5 676f2492b7735db1d47443c43701c14a
SHA1 0507cf23a5ce0515315e0af4dbdf380449041c96
SHA512 f57994d532e8fad3f08a014bda4bb922844f815951f14c1668344de1917d00e476df9a28f26ec341f2284ee4ac3b594f00c13e1677b4e22152a5cefe90083b43
SSDEEP 3072:PXK327xwLECt1Qf+l5dKJjoE1OCkQDA797K56qmcTdLFl:/sLEEQf+MjfOCklB256G
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 214KB

file.exe

IMPHASH 438327afd56702060ffaf873b6503c0b
SHA256 627304aa7e9cf1d57572fcf2a8a93a026a5c4b507c6e57f7ee2f3d3d27fabcd4
MD5 676f2492b7735db1d47443c43701c14a
SHA1 0507cf23a5ce0515315e0af4dbdf380449041c96
SHA512 f57994d532e8fad3f08a014bda4bb922844f815951f14c1668344de1917d00e476df9a28f26ec341f2284ee4ac3b594f00c13e1677b4e22152a5cefe90083b43
SSDEEP 3072:PXK327xwLECt1Qf+l5dKJjoE1OCkQDA797K56qmcTdLFl:/sLEEQf+MjfOCklB256G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24718

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasW GetModuleHandleW CreateDirectoryExW ReadConsoleInputW GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA SetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeW LocalShrink GlobalFlags GetModuleHandleA UpdateResourceA CreateActCtxW CopyFileW VerSetConditionMask AddConsoleAliasA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess RtlCaptureContext InterlockedDecrement GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode InterlockedExchangeAdd MoveFileWithProgressA GetTickCount SetLastError GetPrivateProfileStructA CreateMutexA LoadLibraryA GetLastError DeleteFileA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

Sharing