file[.]exe | Triage™

General

Target
file.exe
Size 213KB
Sample230105-vs5t5acf62
SHA256 f04471bdea8f1baa0d4d73ab64e4431333f3254091fe48188e9a149fedaa9037
MD5 9a3fe2364f9f8e6e9afff81422368665
SHA1 f0cce4d07be68c40b4be9634cfb6fab341589ad2
SHA512 b97ab9d8f7c15bef3e1762acdc562d803b7d0c868a6a4e36435aacd68ff67737c008e31848f3b0553d77077dc3da5864b73b69bf4dd23ade1cf8882d001c9993
SSDEEP 3072:wKaXhtzZYLmNJ/ycL8iOP5fP9KrCkoBlTW/tmpd:L6SLmNJL8io1/G/sd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 213KB

file.exe

IMPHASH dfef7d0386798b1593a141c677df8ca7
SHA256 f04471bdea8f1baa0d4d73ab64e4431333f3254091fe48188e9a149fedaa9037
MD5 9a3fe2364f9f8e6e9afff81422368665
SHA1 f0cce4d07be68c40b4be9634cfb6fab341589ad2
SHA512 b97ab9d8f7c15bef3e1762acdc562d803b7d0c868a6a4e36435aacd68ff67737c008e31848f3b0553d77077dc3da5864b73b69bf4dd23ade1cf8882d001c9993
SSDEEP 3072:wKaXhtzZYLmNJ/ycL8iOP5fP9KrCkoBlTW/tmpd:L6SLmNJL8io1/G/sd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24431

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateDirectoryExW ReadConsoleInputW GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA SetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeW LocalShrink GlobalFlags GetModuleHandleA UpdateResourceA CreateActCtxW CopyFileW InterlockedExchangeAdd MoveFileWithProgressA GetConsoleAliasW CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess RtlCaptureContext InterlockedDecrement GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError GetPrivateProfileStructA VerSetConditionMask LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

Sharing