file[.]exe | Triage™

General

Target
file.exe
Size 263KB
Sample230108-km5xtsdb32
SHA256 390f4f020e690300200db6b8cf00e5cb4cde887b8249e731a095aced7a1bef82
MD5 a35ce6fc97aa8fa54afa43808153bf33
SHA1 3285adb85971400d48016ae77e2834646b07691b
SHA512 32f7c0b61ba49438d89aed522898459bf34553f6385d4e394d3a0fcc56c02e589bfec74a927867fc578d7bdceb4eba622183e85c04e38afd19abb39ba85f68bf
SSDEEP 3072:XXhV3FBEGLAF/jJNTvQp58q9ZL+OM/GY/Bs/WCQuLKWFV5iXpxOxqKPhKUZNTKXX:HwGLAFNNTvQnLEnsxQQKwiXtKPhOuN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 263KB

file.exe

IMPHASH 2a53ffd9ea97aa99a0d0e873e4f019d6
SHA256 390f4f020e690300200db6b8cf00e5cb4cde887b8249e731a095aced7a1bef82
MD5 a35ce6fc97aa8fa54afa43808153bf33
SHA1 3285adb85971400d48016ae77e2834646b07691b
SHA512 32f7c0b61ba49438d89aed522898459bf34553f6385d4e394d3a0fcc56c02e589bfec74a927867fc578d7bdceb4eba622183e85c04e38afd19abb39ba85f68bf
SSDEEP 3072:XXhV3FBEGLAF/jJNTvQp58q9ZL+OM/GY/Bs/WCQuLKWFV5iXpxOxqKPhKUZNTKXX:HwGLAFNNTvQnLEnsxQQKwiXtKPhOuN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24639

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateDirectoryExW ReadConsoleInputA GetTempPathA GetCurrentDirectoryW RemoveDirectoryA OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceW FindNextFileW FindFirstVolumeW LocalFree GlobalFlags GetModuleHandleA UpdateResourceW CreateActCtxW CopyFileW InterlockedExchangeAdd MoveFileWithProgressA GetConsoleAliasW CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsW ResetEvent MoveFileExA CreateMailslotA WriteConsoleInputA QueryDosDeviceW GetCurrentProcess InterlockedDecrement SetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError GetPrivateProfileStructA CopyFileExW VerSetConditionMask LoadLibraryA CreateFileA CloseHandle GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

winhttp

WinHttpWriteData

Sharing