file[.]exe | Triage™

General

Target
file.exe
Size 193KB
Sample230124-jcc9dsbd3x
SHA256 83fbd1b207a23df738d9cb18f94fbaa0530740c70222fc5fc283a2adea37cef1
MD5 03c5ded86f9be8c68c978d1443e2ccde
SHA1 9d9266030a0aedeca48689f2422d34f91775358a
SHA512 8d8ad3a96f1e2be456440826a5ca8d01052f3d9874f1f98c5be740b9da309b8ad46e4f942ca3111189a7f5282c05736c6f9eafbd91ae53cf7e5db897623cde15
SSDEEP 3072:EBN0XKY+FELpF9NW35bEU8IIj54X8rJTyosDN:ciTLpF9NWp8cX8tTX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 193KB

file.exe

IMPHASH a1c997a31aa5b0cb52205edde3f0137c
SHA256 83fbd1b207a23df738d9cb18f94fbaa0530740c70222fc5fc283a2adea37cef1
MD5 03c5ded86f9be8c68c978d1443e2ccde
SHA1 9d9266030a0aedeca48689f2422d34f91775358a
SHA512 8d8ad3a96f1e2be456440826a5ca8d01052f3d9874f1f98c5be740b9da309b8ad46e4f942ca3111189a7f5282c05736c6f9eafbd91ae53cf7e5db897623cde15
SSDEEP 3072:EBN0XKY+FELpF9NW35bEU8IIj54X8rJTyosDN:ciTLpF9NWp8cX8tTX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30774

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesW CreateMutexW GetLastError LoadLibraryW SetCommMask LocalUnlock GetUserDefaultLangID TerminateThread CreateFileA GetModuleHandleA GetConsoleAliasesLengthW GetVolumePathNameA FindVolumeMountPointClose lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA EnumTimeFormatsW VerifyVersionInfoW FindNextFileA InterlockedCompareExchange GetConsoleAliasW FreeLibraryAndExitThread GetTempFileNameA LocalFlags LoadLibraryA CloseHandle HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

AlphaBlend

Sharing