file[.]exe | Triage™

General

Target
file.exe
Size 364KB
Sample230105-t1cymsce85
SHA256 be83f89b8d89fe4b38210eb67d397d20d94e5fa7415494027315bdf022c2f28e
MD5 2b32ce342d6753f3309478a51cfa45c6
SHA1 a8dfa45d059034d2ad73d1ebac49f86c18930b48
SHA512 636b0d4d262adb08233723df50a919a72e01435f092c579ca3872c6c39c8d51fb123cabc861e0b9d7e5a44c472e06a37ec6bd8bc08a75d9941052b3a042cc01f
SSDEEP 6144:W6QLsQU9CJKMem8KUN8Q+TgvIHWtOcfJBLtTYn6CF/lVNXT/kFJ1W:ZQYQU9CJKEi8n1WocTtU6CDD/kX4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 364KB

file.exe

IMPHASH dfef7d0386798b1593a141c677df8ca7
SHA256 be83f89b8d89fe4b38210eb67d397d20d94e5fa7415494027315bdf022c2f28e
MD5 2b32ce342d6753f3309478a51cfa45c6
SHA1 a8dfa45d059034d2ad73d1ebac49f86c18930b48
SHA512 636b0d4d262adb08233723df50a919a72e01435f092c579ca3872c6c39c8d51fb123cabc861e0b9d7e5a44c472e06a37ec6bd8bc08a75d9941052b3a042cc01f
SSDEEP 6144:W6QLsQU9CJKMem8KUN8Q+TgvIHWtOcfJBLtTYn6CF/lVNXT/kFJ1W:ZQYQU9CJKEi8n1WocTtU6CDD/kX4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24431

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateDirectoryExW ReadConsoleInputW GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA SetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeW LocalShrink GlobalFlags GetModuleHandleA UpdateResourceA CreateActCtxW CopyFileW InterlockedExchangeAdd MoveFileWithProgressA GetConsoleAliasW CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess RtlCaptureContext InterlockedDecrement GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError GetPrivateProfileStructA VerSetConditionMask LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

Sharing