file[.]exe | Triage™

General

Target
file.exe
Size 206KB
Sample230115-qrtcgsfc77
SHA256 cc93dcf1ba087eb7e4aedf9ed3f4f763a4ab2ba243c16a2005e06f08daabffc7
MD5 96b7c7217ae745c0c244ad1d968c8f16
SHA1 7f433fe85ccb93b2339f6bc4c7cf5ef53aa68345
SHA512 31c21c62b353e22382f17f7253ca3afa9558dd91c474235a98e348b298d11addc453065445c37305592e2d6c6c9b0ed216eb33f2921e7236b88f3bfa32bdcf5c
SSDEEP 3072:1Xt6Xk6tCaI5mikPmbX8E07FRoV+MVZ739CN24WL1Zi:x35IGI7foYMbtCn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 206KB

file.exe

IMPHASH 915857a0c1b1198d919ed99e3d150aa9
SHA256 cc93dcf1ba087eb7e4aedf9ed3f4f763a4ab2ba243c16a2005e06f08daabffc7
MD5 96b7c7217ae745c0c244ad1d968c8f16
SHA1 7f433fe85ccb93b2339f6bc4c7cf5ef53aa68345
SHA512 31c21c62b353e22382f17f7253ca3afa9558dd91c474235a98e348b298d11addc453065445c37305592e2d6c6c9b0ed216eb33f2921e7236b88f3bfa32bdcf5c
SSDEEP 3072:1Xt6Xk6tCaI5mikPmbX8E07FRoV+MVZ739CN24WL1Zi:x35IGI7foYMbtCn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24302

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumberOfConsoleInputEvents GetStringTypeExW GetConsoleTitleW CreateFileW Module32FirstW GetConsoleAliasW SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExW ZombifyActCtx GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage GetHandleInformation FindNextFileA CompareStringA LoadLibraryW CreateNamedPipeA GlobalFlags GetModuleHandleA CopyFileW CreateActCtxA lstrlenA TlsAlloc CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW CreateMailslotW WriteConsoleInputA InterlockedExchangeAdd EnumTimeFormatsA FindFirstFileW FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount SetLastError GetLastError CreateFileA UnhandledExceptionFilter LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetCursorInfo

gdi32

GetBrushOrgEx

Sharing