file[.]exe | Triage™

General

Target
file.exe
Size 213KB
Sample230105-vejdzacf29
SHA256 f04fbfcb6c3dc95153ecb44d83d1ddb80de24f52f1f74c0b26cdfc78514dba00
MD5 c83b27d727ec5275faf091df4f12dc90
SHA1 43de2b9a462377524f63fb2f9a21b22830f3c6c2
SHA512 5af89a257aa350f5292dbd0491bf8a521528dc9f18801240f6301b86893cb9d42a876fae0ca6a1c60d97300a290f210703fa3cceaad7df73d203e791879b6545
SSDEEP 3072:p6aXhJXDZLHR9lScVfbJAvcP5knqXSlmDvfHQF4MWzMK2:c6lLHRaEfbJAvpqXSqvf7PI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 213KB

file.exe

IMPHASH dfef7d0386798b1593a141c677df8ca7
SHA256 f04fbfcb6c3dc95153ecb44d83d1ddb80de24f52f1f74c0b26cdfc78514dba00
MD5 c83b27d727ec5275faf091df4f12dc90
SHA1 43de2b9a462377524f63fb2f9a21b22830f3c6c2
SHA512 5af89a257aa350f5292dbd0491bf8a521528dc9f18801240f6301b86893cb9d42a876fae0ca6a1c60d97300a290f210703fa3cceaad7df73d203e791879b6545
SSDEEP 3072:p6aXhJXDZLHR9lScVfbJAvcP5knqXSlmDvfHQF4MWzMK2:c6lLHRaEfbJAvpqXSqvf7PI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24431

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateDirectoryExW ReadConsoleInputW GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA SetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeW LocalShrink GlobalFlags GetModuleHandleA UpdateResourceA CreateActCtxW CopyFileW InterlockedExchangeAdd MoveFileWithProgressA GetConsoleAliasW CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess RtlCaptureContext InterlockedDecrement GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError GetPrivateProfileStructA VerSetConditionMask LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

Sharing