file[.]exe | Triage™

General

Target
file.exe
Size 327KB
Sample230119-wlv7sagg67
SHA256 09cd7db8edbe5ede4d66f83f3314f0f98bc088bcd3d6772b02e883ecee24ef93
MD5 a8a7081b92c6ad76b834fcc345a85c8b
SHA1 d5de147e3525900801cc9cd34d466a439a6e899e
SHA512 3f7e949b69e39d0504b0cf417af9e246eec546f2a8f82e18c77da1c7edf623dd2e7e457cf06212322eb3d087fb77ef7aeffc054a867430fa91fb8e0bb48862a4
SSDEEP 6144:7sYlDPoWznCkC7fyagFMUhpnbdshjhegm3w/Ci56:7sYhPoWQyag8ly3w/M
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 327KB

file.exe

IMPHASH a822bcecb8a7bb422a72e5dc41c7411f
SHA256 09cd7db8edbe5ede4d66f83f3314f0f98bc088bcd3d6772b02e883ecee24ef93
MD5 a8a7081b92c6ad76b834fcc345a85c8b
SHA1 d5de147e3525900801cc9cd34d466a439a6e899e
SHA512 3f7e949b69e39d0504b0cf417af9e246eec546f2a8f82e18c77da1c7edf623dd2e7e457cf06212322eb3d087fb77ef7aeffc054a867430fa91fb8e0bb48862a4
SSDEEP 6144:7sYlDPoWznCkC7fyagFMUhpnbdshjhegm3w/Ci56:7sYhPoWQyag8ly3w/M
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26072

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA CreateFileW GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW CreateNamedPipeA GlobalFlags GetModuleHandleA GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointA GetVolumePathNameW GetProcessPriorityBoost OpenFileMappingW lstrcmpW AddRefActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA lstrcpyW lstrcatA GenerateConsoleCtrlEvent CopyFileW DosDateTimeToFileTime lstrlenA TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressA ResetEvent CreateMailslotA WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsA FindNextFileA VerifyVersionInfoA GetConsoleAliasW CreateFileA GetNumberOfConsoleInputEvents GetConsoleTitleW ProcessIdToSessionId LoadLibraryA MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount RaiseException WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize DeleteFileA

gdi32

GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

msimg32

AlphaBlend

Sharing