file[.]exe | Triage™

General

Target
file.exe
Size 210KB
Sample230116-av7raaee22
SHA256 12ca778b2f964c751dedf8211fb4959be500022d1b26ce2d427b4736bb3fa9f2
MD5 a272c2456368521390a3b920e88cd39e
SHA1 1eb4a8adb3fbb1a6a5478a97054865a17e596e17
SHA512 eff3f09fb644ab3e78b8ca9b6c838cc81efaa25d7a430444812f445e27f71cf5e14ac1ac33da00ee5b8f83865eb6abf47083e28cd1dd49dcc65fa1bbb1dfb65f
SSDEEP 3072:8YXj7gW0W5hed5Yu/BvIiER1Q50VM3MUAMOgbytz6yW0i:8sIWXfu5vJERO50VFUnOwoz2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 210KB

file.exe

IMPHASH 0f2c785ca8bc5088ca1685c62509469d
SHA256 12ca778b2f964c751dedf8211fb4959be500022d1b26ce2d427b4736bb3fa9f2
MD5 a272c2456368521390a3b920e88cd39e
SHA1 1eb4a8adb3fbb1a6a5478a97054865a17e596e17
SHA512 eff3f09fb644ab3e78b8ca9b6c838cc81efaa25d7a430444812f445e27f71cf5e14ac1ac33da00ee5b8f83865eb6abf47083e28cd1dd49dcc65fa1bbb1dfb65f
SSDEEP 3072:8YXj7gW0W5hed5Yu/BvIiER1Q50VM3MUAMOgbytz6yW0i:8sIWXfu5vJERO50VFUnOwoz2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23742

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeExA GetConsoleTitleW CreateFileW _hwrite GetConsoleAliasA SetComputerNameA GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExA ZombifyActCtx GetLogicalDriveStringsA ReadConsoleInputA GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringW GetProcAddress LocalAlloc GetBinaryTypeA IsDebuggerPresent GetHandleInformation FindNextFileA GetNumberOfConsoleInputEvents LoadLibraryW CreateNamedPipeW GlobalFlags GetModuleHandleA CopyFileW lstrlenA TlsAlloc CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressW CreateMailslotW WriteConsoleInputW InterlockedExchangeAdd EnumTimeFormatsW FindFirstFileA FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount SetLastError GetLastError CreateFileA CompareStringA UnhandledExceptionFilter LoadLibraryA SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetModuleHandleW TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetCursorInfo

gdi32

GetBrushOrgEx GetCharWidth32A

Sharing