file[.]exe | Triage™

General

Target
file.exe
Size 194KB
Sample230124-mbyeqaca5w
SHA256 cd56ba9fee78295bd38d1c419b9738c8e88d53e0ce7bb75a07382aad808f7a2b
MD5 41c481d9f0a07a0906143c39dbacc84c
SHA1 1a1cb23a9cc2f7da5bfd1285b6e73907f2c464b8
SHA512 0d2e7e105ac675ea1009b4f94f62afbade24f99cb7d0d9692f64b0bddc7513bcec0e908f8830dd0a40fca2e2f5473773cc70dcbe6b8050a3a105508ae07583f8
SSDEEP 3072:OBN0XKu8JYtLDxvcov5sQtgAdS5b1/XapjFTYSZRVcugoMm:iiE4LtvcoSrC1aEcBoM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 194KB

file.exe

IMPHASH a1c997a31aa5b0cb52205edde3f0137c
SHA256 cd56ba9fee78295bd38d1c419b9738c8e88d53e0ce7bb75a07382aad808f7a2b
MD5 41c481d9f0a07a0906143c39dbacc84c
SHA1 1a1cb23a9cc2f7da5bfd1285b6e73907f2c464b8
SHA512 0d2e7e105ac675ea1009b4f94f62afbade24f99cb7d0d9692f64b0bddc7513bcec0e908f8830dd0a40fca2e2f5473773cc70dcbe6b8050a3a105508ae07583f8
SSDEEP 3072:OBN0XKu8JYtLDxvcov5sQtgAdS5b1/XapjFTYSZRVcugoMm:iiE4LtvcoSrC1aEcBoM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30774

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToLocalFileTime FindActCtxSectionStringA GetCommTimeouts GetSystemWindowsDirectoryA GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathW GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc EnumSystemLocalesW CreateMutexW GetLastError LoadLibraryW SetCommMask LocalUnlock GetUserDefaultLangID TerminateThread CreateFileA GetModuleHandleA GetConsoleAliasesLengthW GetVolumePathNameA FindVolumeMountPointClose lstrcmpA ChangeTimerQueueTimer GetLocaleInfoA GetComputerNameA lstrcpynW SetConsoleCtrlHandler CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressW GetConsoleProcessList WaitForMultipleObjectsEx WritePrivateProfileStructA EnumTimeFormatsW VerifyVersionInfoW FindNextFileA InterlockedCompareExchange GetConsoleAliasW FreeLibraryAndExitThread GetTempFileNameA LocalFlags LoadLibraryA CloseHandle HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize

gdi32

GetBrushOrgEx GetCharWidthA

winhttp

WinHttpReadData

msimg32

AlphaBlend

Sharing