file[.]exe | Triage™

General

Target
file.exe
Size 175KB
Sample230124-m7ebqacb3w
SHA256 b1be1aa57724ed2a06aa942d183a3739e598680d9eaa4150f14644b8f522ca6b
MD5 069683ee98d3a02bc864b610b302bc66
SHA1 aaaa73c89d560e52608f441d927d597525f2bc55
SHA512 8a5cc4fac5aa1fe3751d2eec1f1ef368e5b6de1f76c49848ec31f8197ea6d5d75e565412b0cd3b511ec6a1cb2166be4e411bd4aeebb8190c8e8fd63a3f36a638
SSDEEP 3072:lBN2I61dLhO5a5DGeaY5icD/hWCoAvLWvnqfVf:L6LhO5Be35i0/hWdAzDV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 175KB

file.exe

IMPHASH e874c21e93c8af101ec3f6531c2eb69d
SHA256 b1be1aa57724ed2a06aa942d183a3739e598680d9eaa4150f14644b8f522ca6b
MD5 069683ee98d3a02bc864b610b302bc66
SHA1 aaaa73c89d560e52608f441d927d597525f2bc55
SHA512 8a5cc4fac5aa1fe3751d2eec1f1ef368e5b6de1f76c49848ec31f8197ea6d5d75e565412b0cd3b511ec6a1cb2166be4e411bd4aeebb8190c8e8fd63a3f36a638
SSDEEP 3072:lBN2I61dLhO5a5DGeaY5icD/hWCoAvLWvnqfVf:L6LhO5Be35i0/hWdAzDV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22870

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesA CreateMutexW GetLastError LoadLibraryW GetCommMask LocalUnlock GetUserDefaultLangID TerminateThread GlobalFlags CreateFileA GetConsoleAliasesLengthW GetVolumePathNameW InterlockedCompareExchange FindVolumeMountPointClose lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressA GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA InterlockedExchangeAdd EnumTimeFormatsW VerifyVersionInfoW FindNextFileA GetConsoleAliasW FreeLibraryAndExitThread GetTempFileNameA GetModuleHandleA LoadLibraryA CloseHandle MoveFileA DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

AlphaBlend

Sharing