file[.]exe | Triage™

General

Target
file.exe
Size 259KB
Sample230109-cracqacf26
SHA256 dc32f4153129f3ec08faaf07de5cb44f6c71a3103b65d0f3e0b28ad361b958e7
MD5 85ac799fc08fd79ff09cad0f7644b84f
SHA1 80a75d5c9dacdc69eaa3021da8f1e29a7bb1ffa5
SHA512 746e085213b44add1571c0113b886f452a15827e663b01eb291d90ab58b6e76e6023778f7d9d74db871f6cfe6ff24758e6041554546eac1e7ca735e69ae0e075
SSDEEP 3072:LHXEy6PweWbQLh2Ym9dB3ZJ15sNzrIftde7VvTz3p9UwsNkAzAkEw9hZCRRzMuWI:L8wezLMF9dB3ZOzQeBzpKNxNcqgd3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 259KB

file.exe

IMPHASH 548dbc61a50c5d0aa439debd4518e29e
SHA256 dc32f4153129f3ec08faaf07de5cb44f6c71a3103b65d0f3e0b28ad361b958e7
MD5 85ac799fc08fd79ff09cad0f7644b84f
SHA1 80a75d5c9dacdc69eaa3021da8f1e29a7bb1ffa5
SHA512 746e085213b44add1571c0113b886f452a15827e663b01eb291d90ab58b6e76e6023778f7d9d74db871f6cfe6ff24758e6041554546eac1e7ca735e69ae0e075
SSDEEP 3072:LHXEy6PweWbQLh2Ym9dB3ZJ15sNzrIftde7VvTz3p9UwsNkAzAkEw9hZCRRzMuWI:L8wezLMF9dB3ZOzQeBzpKNxNcqgd3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26033

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExA ReadConsoleInputA GetTempPathW GetCurrentDirectoryW ContinueDebugEvent LCMapStringW GetProcAddress LocalAlloc GetBinaryTypeW SearchPathA VerifyVersionInfoA GetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeW LocalFree GlobalFlags CopyFileW UpdateResourceW CreateActCtxW DeleteVolumeMountPointW InterlockedExchangeAdd GetConsoleAliasA VerSetConditionMask CreateMutexA DeactivateActCtx GetDiskFreeSpaceW MoveFileW GetLogicalDriveStringsA ResetEvent InterlockedPushEntrySList CreateMailslotA WriteConsoleInputA QueryDosDeviceA InterlockedDecrement EnumTimeFormatsW SetFileValidData FindFirstFileA FreeEnvironmentStringsW SetErrorMode GetTickCount SetLastError AllocateUserPhysicalPages GetPrivateProfileStructA CopyFileExA MoveFileWithProgressA LoadLibraryA GetLastError WideCharToMultiByte DeleteFileA GetStartupInfoW GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CreateFileA

gdi32

GetTextFaceW

winhttp

WinHttpSetCredentials

Sharing